Common use of Compliance with Data Privacy Laws Clause in Contracts

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance comply in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (ia) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (iib) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iiic) any information that qualifies as “personal data,” as defined by GDPR; and “personal information,” or similar term under Privacy Laws. (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (vi) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand from a regulatory authority pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable state and federal data privacy and security laws Laws and regulationsregulations regarding the collection, includinguse, as applicablestorage, retention, disclosure, transfer, disposal, or any other processing (collectively “Process” or “Processing”) of Personal Data, including HIPAA, the California Consumer Privacy Act, and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the its Subsidiaries have in place, comply with, and take all appropriate steps reasonably designed necessary to ensure compliance in all material respects with their policies and procedures relating to data privacy and security security, and the collection, storage, use, disclosure, handling and analysis Processing of Personal Data and Confidential Data (the “PoliciesPrivacy Statements”); (iii) . The Company and its Subsidiaries have, except as would not reasonably be expected, individually or in the Company provides aggregate, to have a Material Adverse Effect, at all times since January 1, 2022 provided accurate notice of its applicable Policies Privacy Statements then in effect to its customersclients, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationrepresentatives. None of such disclosures made or contained in any of the Policies Privacy Statements have been materially inaccurate, misleading, incomplete, or deceptive in material violation of any Privacy Laws and the execution, delivery and performance Laws. The Company further certifies that neither it nor any of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the its Subsidiaries, : (i) has, to the knowledge of the Company, has received written notice of any actual or potential claim, complaint, proceeding, regulatory proceeding or liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, contracts related to the Processing of Personal Data or Confidential Data, or Privacy Statements, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request Privacy Law or demand pursuant to any Privacy Lawcontract; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as otherwise disclosed in the Registration Statement and the Prospectus or as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and its subsidiaries at all times during the past three years werehave been, and are presently, in compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA, as applicable(ii) the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance in all material respects with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679), and (iii) the Company and its subsidiaries, are currently taking or have taken commercially reasonable actions to prepare to comply with all applicable laws and regulations with respect to Personal Data (defined below) (collectively, the “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) Protected Health Information as defined by HIPAA; (iv) “personal data” as defined by GDPR; and (ivv) any other piece of information that allows the identification of identifies such natural person. At all times, the Company and its subsidiaries have made all disclosures to users or his customers required by applicable Privacy Laws and regulatory rules or her familyrequirements, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None and none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) hasPolicy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. Except as otherwise disclosed in the Registration Statement and the Prospectus or as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, neither the Company nor any of its subsidiaries (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, or has knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, decree or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable data privacy and security laws and regulations, including, as in each case, to the extent applicable, the Health Insurance Portability and Accountability Act (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”) (42 U.S.C. Section 17921 et seq.), and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the . The Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the . The Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable those data subjects whose Personal Data is subject to the Policies. The Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, matter and such Policies do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s persons’ name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) Protected Health Information as defined by HIPAA; (iv) “personal data” as defined by GDPR; and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None To the Company’s Knowledge, none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and or Policies in any material respect. To the Company’s Knowledge, the execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiariesany of its subsidiaries, (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no Knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except, in each case, such as would not have or reasonably be expected to result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the best of the Company’s knowledge, (i) The the Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, have a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as to the extent required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as in each case to the extent required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, individually identifiable bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None Except as would not, individually or in the aggregate, have a Material Adverse Effect, (i) none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in material violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, except as has not been and would not reasonably be expected to be material to the Company and the Subsidiaries, taken as a whole; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance in all material respects with all applicable data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means personal data as defined by the Privacy Laws. (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, place and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives in all material respects as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice in all material respects of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in any material respect in violation of any Privacy Laws and the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the past three years were, in compliance with all applicable provincial, state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA and The Personal Information Protection and Electronic Documents Act, as applicableand the Company and its Subsidiaries have taken commercially reasonable actions to prepare to comply with and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) GDPR (collectively, “the "Privacy Laws”); (ii") except in each case, where such would not, either individually or in the Company and the Subsidiaries have aggregate, reasonably be expected to result in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsa Material Adverse Effect. “"Personal Data” " means (i) a natural person’s 's name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver's license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “"personally identifying information” " under the Federal Trade Commission Act, as amended; (iii) “"personal data” " as defined by the European Union General Data Protection Regulation ("GDPR") (EU 2016/679); (iv) any information which would qualify as "protected health information" under the Health Insurance Portability and Accountability Act and the Health Information Technology for Economic and Clinical Health Act (collectively, "HIPAA"); and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s 's health or sexual orientation. None To ensure material compliance with the Privacy Laws, the Company and its Subsidiaries have in place, materially comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling, and analysis of Personal Data (the "Policies"). The Company and its Subsidiaries have at all times made all disclosures to users or customers required by applicable Laws, and none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) hasPolicy have, to the knowledge of the Company, been inaccurate or in violation of any applicable Laws in any material respect. The Company further represents that, except where such event would not, either individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect, neither it nor any Subsidiary: (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) regulations (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, and have made commercially reasonable efforts to comply with, with and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides has made commercially reasonable efforts to provide accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) the applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; and (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the in any material respect. The execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to To the knowledge of the Company, neither the Company nor the Subsidiaries (i) has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”as defined below); (iiiexcept where the failure to so comply in each clause (i) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of ii)would not have , individually or in the Company’s then-current privacy practices relating to its subject matteraggregate, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsa Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither orientationNeither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy LawLaws; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law; except in each case of clauses (i), (ii) and (iii) as would not have, individually or in the aggregate, a Material Adverse Effect.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except for, in each case, failure or noncompliance that would not result in a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in material compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) as amended by the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH”), as applicableand the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”). The Company and its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any Policy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary: (i) has received notice of any actual or potential liability under or relating to, or actual or potential violation of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Law; or (iii) the Company provides accurate notice of its applicable Policies is a party to its customersany order, employeesdecree, third party vendors and representatives as required by or agreement that imposes any obligation or liability under any Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy LawsLaw. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; GDPR and (iv) any other piece of information that allows the identification of such natural personwhich would qualify as “protected health information” under HIPAA, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation as amended by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy LawHITECH.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation the Health Insurance Portability and Accountability Act of 1996, as applicableamended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”) and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) , except for any noncompliance that would not result in a Material Adverse Effect. To ensure compliance with the Privacy Laws, the Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, processing, disclosure, handling handling, and analysis of Personal Data (defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under HIPAA; and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None The Company has at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any of the Policies Policy have been inaccurate, misleading, inaccurate or deceptive in violation of any Privacy Laws applicable laws and the execution, delivery and performance of this Agreement will regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary (except in each case as would not result in have a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Material Adverse Effect): (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, DB2/ 46767468.11 or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law. Any certificate signed by an officer of the Company and delivered to the Agent or to counsel for the Agent pursuant to or in connection with this Agreement shall be deemed to be a representation and warranty by the Company, as applicable, to the Agent as to the matters set forth therein.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance in all material respects with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectivelyregulations(collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as to the extent required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as to the extent required by Privacy Laws. “Personal Data” means personal data as defined by the Privacy Laws. (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been materially inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law, except as would not be reasonably expected to have a Material Adverse Effect; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, An Act Respecting the European Union General Data Protection Regulation of Personal Information in the Private Sector (Quebec) (chapter P-39.1) (“GDPR”) (EU 2016/679) (ARPPIPS” and, collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure material compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (iiv) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (vi) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (ix) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (iiy) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iiiz) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years last one (1) year (or such shorter period as the Company was required by law or regulation to be in compliance with Privacy Laws (as defined herein)) were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) regulations (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; and (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all prior times during the past three years to January 1, 2021 were, in material compliance with all applicable state and federal data privacy and security laws Laws and regulationsregulations regarding the collection, includinguse, as applicablestorage, retention, disclosure, transfer, disposal, or any other processing (collectively “Process” or “Processing”) of Personal Data, including HIPAA, the California Consumer Privacy Act, and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the its Subsidiaries have in place, comply with, and take all appropriate steps reasonably designed necessary to ensure compliance in all material respects with their policies and procedures relating to data privacy and security security, and the collection, storage, use, disclosure, handling and analysis Processing of Personal Data and Confidential Data (the “PoliciesPrivacy Statements”); (iii) . The Company and its Subsidiaries have, except as would not reasonably be expected, individually or in the Company provides aggregate, to have a Material Adverse Effect, at all times since January 1, 2021 provided accurate notice of its applicable Policies Privacy Statements then in effect to its customersclients, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationrepresentatives. None of such disclosures made or contained in any of the Policies Privacy Statements have been materially inaccurate, misleading, incomplete, or deceptive in material violation of any Privacy Laws and the execution, delivery and performance Laws. The Company further certifies that neither it nor any of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the its Subsidiaries, : (i) has, to the knowledge of the Company, has received written notice of any actual or potential claim, complaint, proceeding, regulatory proceeding or liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, contracts related to the Processing of Personal Data or Confidential Data, or Privacy Statements, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request Privacy Law or demand pursuant to any Privacy Lawcontract; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the Company’s knowledge: (i) The the Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None Except as would not, individual or in the aggregate, have a material adverse effect: (i) none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws Laws; and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, (i) has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in material compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply withwith in all material respects, and take appropriate steps reasonably designed to ensure material compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in material compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iviii) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the Company does not have any reason to believe that the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable state and federal data privacy and security laws and regulationsregulations regarding the collection, includinguse, as applicablestorage, retention, disclosure, transfer, disposal, or any other processing (collectively “Process” or “Processing”) of Personal Data, including without limitation HIPAA, the California Consumer Privacy Act (“CCPA”), and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take all appropriate steps reasonably designed necessary to ensure compliance in all material respects with their policies and procedures relating to data privacy and security security, and the collection, storage, use, disclosure, handling and analysis Processing of Personal Data and Confidential Data (the “PoliciesPrivacy Statements”); (iii) . The Company and its subsidiaries have, except as would not reasonably be expected, individually or in the Company provides aggregate, to result in a Material Adverse Change, at all times since inception provided accurate notice of its applicable Policies Privacy Statements then in effect to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationrepresentatives. None of such disclosures made or contained in any of the Policies Privacy Statements have been materially inaccurate, misleading, incomplete, or deceptive in material violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of Laws. The Company further certifies that neither it nor any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, subsidiary: (i) has, to the knowledge of the Company, has received written notice of any actual or potential claim, complaint, proceeding, regulatory proceeding or liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, contracts related to the Processing of Personal Data or Confidential Data, or Privacy Statements, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request Privacy Law or demand pursuant to any Privacy Lawcontract; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable data privacy and security laws and regulations, includingincluding without limitation, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) HIPAA, as amended by HITECH (collectively, “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply materially complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsapplicable. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” Protected Health Information as defined by GDPRHIPAA; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. Both the Company and its subsidiaries since inception have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and have provided accurate notice of its Policies then in effect to its customers, employees, third party vendors and representatives as required by applicable laws and regulatory rules or requirements, except where the failure to do so would not, individually or in the aggregate, have a Material Adverse Effect. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and the or Policies in any material respect. The execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of violation of any Privacy Laws or Policies. Neither the The Company nor the Subsidiaries, further certifies that it: (i) has, to the knowledge of the Company, has not received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is not a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA, as applicableand the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance in all material respects with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Lawsapplicable. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” Protected Health Information as defined by GDPRHIPAA (as defined below); and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None The Company and its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) hasPolicy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary: (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) as amended by the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH”), as applicableand the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (as defined below) (the “Policies”). The Company and its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any Policy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary: (i) has received notice of any actual or potential liability under or relating to, or actual or potential violation of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Law; or (iii) the Company provides accurate notice of its applicable Policies is a party to its customersany order, employeesdecree, third party vendors and representatives as required by or agreement that imposes any obligation or liability under any Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy LawsLaw. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; GDPR and (iv) any other piece of information that allows the identification of such natural personwhich would qualify as “protected health information” under HIPAA, as amended by HITECH. Any certificate signed by any officer or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability representative of the Company or any of its subsidiaries and delivered to the Subsidiaries under, Agent or actual or potential violation counsel for the Agent in connection with an issuance of Shares shall be deemed a representation and warranty by the Company or to the Subsidiaries of, any Agent as to the matters covered thereby as of the Privacy Laws; (ii) is currently conducting date or paying fordates indicated in such certificate. The Company acknowledges that the Agent and, in whole or in part, any investigation, remediation or other corrective action for purposes of the opinions to be delivered pursuant to any regulatory request or demand pursuant Section 4(p) hereof, counsel to any Privacy Law; or (iii) is a party the Company and counsel to any orderthe Agent, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Lawwill rely upon the accuracy and truthfulness of the foregoing representations and hereby consents to such reliance.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”), except where the failure to do so would not, individually or in the aggregate, have a Material Adverse Effect; (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”), except where the failure to do so would not, individually or in the aggregate, have a Material Adverse Effect; (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries areis, and at all prior times during the past three years werewas, in compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA (as defined below), as applicableand the Company has taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) , except where non-compliance would not reasonably be expected, individually or in the aggregate, to result in a Material Adverse Effect. To ensure compliance with the Privacy Laws, the Company and the Subsidiaries have has in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”). The Company has at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any Policy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that it: (i) has not received written notice of any actual or potential liability under or relating to, or actual or potential violation of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Law; or (iii) the Company provides accurate notice of its applicable Policies is not a party to its customersany order, employeesdecree, third party vendors and representatives as required by or agreement that imposes any obligation or liability under any Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy LawsLaw. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”); and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance in all material respects with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPRGDPR (if applicable); and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation, and that is not permitted under Privacy Laws. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance in all material respects with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, have a Material Adverse Effect, (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, without limitation, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as to the extent required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as to the extent required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. Except as would not, individually or in the aggregate, have a Material Adverse Effect, (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. To the Company’s knowledge, (i) The the Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws, except as would not, individually or in the aggregate, have a Material Adverse Effect. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”), except as would not, individually or in the aggregate, have a Material Adverse Effect; (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance in all material respects with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance in all material respects with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means personal data as defined by the Privacy Laws. (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all times during the past three two (2) years prior hereto were, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA, as applicableand the Company and its Subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in material compliance with, the European Union General Data Protection Regulation (“GDPR”) GDPR (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the its Subsidiaries have in place, comply in all material respects with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”); (iii) the . The Company provides accurate notice of and its applicable Policies Subsidiaries have at all times made all disclosures to its customers, employees, third party vendors and representatives as users or customers required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) hasPolicy have, to the knowledge of the Company, been inaccurate or in violation of any Privacy Laws in any material respect. The Company further certifies that neither it nor any Subsidiary: (i) has received written notice of any actual or potential material liability of the Company under or the Subsidiaries underrelating to, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any material violation of Privacy Law; or (iii) is a party to any order, decree, or agreement by or with that imposes any court or arbitrator or governmental or regulatory authority that imposed any material obligation or liability under relating to any violation of Privacy Law. (rr) No Disqualification Event. With respect to Securities to be offered and sold hereunder in reliance on Rule 506(b) under the 1933 Act (“Regulation D Securities”), none of the Company, any of its predecessors, any affiliated issuer, any director, executive officer, other officer of the Company participating in the offering contemplated hereby, or, to the Company’s knowledge, any beneficial owner of 20% or more of the Company’s outstanding voting equity securities, calculated on the basis of voting power, nor any promoter (as that term is defined in Rule 405 under the 1933 Act) connected with the Company in any capacity at the time of sale (each, an “Issuer Covered Person” and, together, “Issuer Covered Persons”) is subject to any Disqualification Event, except for a Disqualification Event covered by Rule 506(d)(2) or (d)(3). The Company has exercised reasonable care to determine whether any Issuer Covered Person is subject to a Disqualification Event. The Company has complied, to the extent applicable, with its disclosure obligations under Rule 506(e), and has furnished to the Buyers a copy of any disclosures provided thereunder.

Compliance with Data Privacy Laws. Except as otherwise disclosed in the Registration Statement and the Prospectus or as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, (i) The the Company and the Subsidiaries are, and its subsidiaries at all times during the past three years werehave been, and are presently, in compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as applicableamended by the Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”), (ii) the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679), and (iii) the Company and its subsidiaries, are currently taking or have taken commercially reasonable actions to prepare to comply with all applicable laws and regulations with respect to Personal Data (defined below) (collectively, the “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) Protected Health Information as defined by HIPAA, as amended by HITECH; (iv) “personal data” as defined by GDPR; and (ivv) any other piece of information that allows the identification of identifies such natural person. At all times, the Company and its subsidiaries have made all disclosures to users or his customers required by applicable Privacy Laws and regulatory rules or her familyrequirements, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None and none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) hasPolicy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. Except as otherwise disclosed in the Registration Statement and the Prospectus or as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, neither the Company nor any of its subsidiaries (i) has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, or has knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, decree or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Except as would not, individually or in the aggregate, reasonably be expected to result in a material adverse effect on the Company and its subsidiaries, taken as a whole, the Subsidiaries Company and each of its subsidiaries are, and at all prior times during the past three years were, in compliance with all applicable data privacy and security data protection laws and regulationsregulations regarding the collection, use, transfer, storage, processing (including by third parties), protection, disposal or disclosure of Personal Data collected from or provided by third parties, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) and the California Consumer Privacy Act (“CCPA”) of 2018 (collectively, the “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s namehas the meaning set forth in the Privacy Laws and includes, street addresswithout limitation, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) , “personal data” as defined by GDPR; , or “personal information” as defined by the CCPA and (iv) any other piece of information that allows the identification relating to or capable of being associated directly or indirectly, with an identified or identifiable such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation, except any “protected health information” as defined by HIPAA. To ensure compliance with the Privacy Laws, the Company and its subsidiaries have made commercially reasonable efforts to put in place, materially comply with, and take reasonably appropriate steps to ensure compliance with their (i) policies and procedures relating to the collection, storage, processing (including by third parties), use, disclosure, handling, and analysis of Personal Data, and (ii) internal data security policies (collectively, the “Policies”). If required by applicable Privacy Laws, the Company has made commercially reasonable efforts to provide accurate notice of its Policies then in effect to its customers, employees, third party vendors and representatives with access to Personal Data. To the knowledge of the Company, each of the Policies provides accurate and sufficient notice as required under applicable Privacy Laws of the Company’s then-current privacy practices relating to its subject matter and to the Company’s knowledge such Company Policies do not contain any material omissions of the Company’s then-current privacy practices. The Company and its subsidiaries since inception have at all times made all disclosures relating to the Company’s Processing of Personal Data to users or customers required by applicable Privacy Laws or contractual requirements except to the extent such failure to provide disclosures would reasonably be expected to, individually or in the aggregate, result in a material adverse effect on the Company and its subsidiaries, taken as a whole. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and the or Policies in any material respect. The execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of violation of any Privacy Laws or Policies. Neither the The Company nor the Subsidiaries, (i) has, further certifies that to the knowledge of the Company, Company neither it nor any subsidiary: (i) has received written notice of any actual or potential liability of the Company complaint under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any a regulatory request requirement or demand pursuant to audit issued by a governmental body, agency or court enforcing any Privacy Law; or (iii) is a party to any order, decree, or settlement agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years since January 1, 2018 were, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA (as defined below), as applicableand the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, to the extent applicable to the Company, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) . To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”). The Company and its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of such disclosures made or contained in any Policy have, to the knowledge of the Company, been inaccurate or in violation of any applicable laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any subsidiary: (i) has received notice of any actual or potential liability under or relating to, or actual or potential violation of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Law; or (iii) the Company provides accurate notice of its applicable Policies is a party to its customersany order, employeesdecree, third party vendors and representatives as required by or agreement that imposes any obligation or liability under any Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy LawsLaw. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; (iv) any information which would qualify as “protected health information” under the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”); and (ivv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, is in compliance with all applicable data privacy and security laws and regulations, including, as applicablewithout limitation, HIPAA and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the . The Company and the Subsidiaries have has in place, comply complies with, and take takes appropriate steps reasonably designed to ensure compliance in all material respects with their its policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the . The Company provides accurate notice of its applicable relevant Policies to its customers, employees, third party vendors and representatives as where it is required by to do so under Privacy Laws; and (iv) applicable . The Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, matter and such Policies do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s persons’ name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which that would qualify as “personally identifying information” be considered an unfair or deceptive trade practice under Section 5 of the Federal Trade Commission Act, as amended; (iii) Protected Health Information as defined by HIPAA; (iv) “personal data” as defined by GDPR; and (ivv) any other piece of information that allows the identification of such natural personperson or household. To the Company’s Knowledge, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None none of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and in any material respect. To the Company’s Knowledge, the execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the The Company nor the Subsidiaries, (i) has, to the knowledge of the Company, has not received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no Knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is not currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or and (iii) is not a party to any order, decree, or agreement by or with order of any court or arbitrator or governmental or regulatory authority that imposed imposes on the Company any obligation obligations or liability liabilities under any Privacy Law.. (ss)

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicableto the extent applicable to the Company and the Subsidiaries, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means personal data as defined by the Privacy Laws. (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential material liability of the Company or the Subsidiaries under, or actual or potential material violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law, except as would not be reasonably expected to have a Material Adverse Effect; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, have a Material Adverse Effect: (i) The Company and the Subsidiaries are, and at all times during the past three years were, in compliance with all applicable data privacy and security laws and regulations, including, as applicable, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance comply with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. Except as would not, individually or in the aggregate, have a Material Adverse Effect: (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, (i) has, to the knowledge of the Company, received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law. Any certificate signed by an officer of the Company and delivered to the Agents or to counsel for the Agents pursuant to or in connection with this Agreement shall be deemed to be a representation and warranty by the Company, as applicable, to the Agents as to the matters set forth therein.

Compliance with Data Privacy Laws. (i) The Company and the its Subsidiaries are, and at all times during the past three years weresince January 1, 2020 have been, in material compliance with all applicable data privacy and security laws and regulations, including, without limitation, as applicable, HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act (42 U.S.C. Section 17921 et seq.). The Company and its Subsidiaries have taken any required and necessary actions to comply in all material respects with the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) ), the California Consumer Privacy Act and all other applicable laws and regulations with respect to Personal Data, including all that have been announced as of the date hereof as becoming effective within 12 months after the date hereof, and for which any non-compliance with same would be reasonably likely to create a material liability as soon they take effect (collectively, the “Privacy Laws”); (ii) . To ensure material compliance with the Privacy Laws, the Company and the its Subsidiaries have in place, comply and are in material compliance with, and take appropriate steps reasonably designed to ensure compliance with their commercially reasonable policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”); (iii) the , as applicable. The Company provides and its Subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and has provided accurate notice of its applicable Policies then in effect to its customers, employees, third party vendors and representatives as required by Privacy Laws; applicable law and (iv) applicable Policies provide accurate and sufficient notice of regulatory rules or requirements, except where the Company’s then-current privacy practices relating failure to its subject matterdo so would not, and do not contain any material omissions of individually or in the Company’s then-current privacy practicesaggregate, as required by Privacy Laws. “Personal Data” means (i) result in a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientationMaterial Adverse Effect. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, deceptive or deceptive in violation of any Privacy Laws and the or Policies in any material respect. The execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of violation of any Privacy Laws or Policies. Neither the The Company further certifies that neither it nor the Subsidiaries, any Subsidiary (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; , and has knowledge of any event or condition that would reasonably be expected to result in any such notice, (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; , or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (iA) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a material breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, its subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries any of its subsidiaries under, or actual or potential violation by the Company or the Subsidiaries any of its subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in material compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation and to the extent applicable to Company, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, materially comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) to the extent required by Privacy Laws, the Company provides and/or makes available accurate notice of its applicable Policies collection, storage, use, disclosure, handling and analysis of Personal Data to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. To the knowledge of Company, (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries are, and at all times during the past last three (3) years were, in compliance with all applicable state, federal and foreign data privacy and security laws and regulations, including, as applicablewithout limitation, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, “Privacy Laws”); (ii) the Company and the Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (as defined below) (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by the Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. (i) None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and (ii) the execution, delivery and performance of this Agreement the Transaction Documents will not result in a breach of any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, Subsidiaries (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company or the Subsidiaries under, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed any obligation or liability under any Privacy Law.. (jj)

Compliance with Data Privacy Laws. (i) The Company and the Subsidiaries its subsidiaries are, and at all times during in the past three five years werehave been, in material compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation the Health Information Technology for Economic and Clinical Health Act, as applicableand all regulations promulgated thereunder (collectively, “HIPAA”), and the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are in compliance with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); (ii) , except as would not, individually or in the aggregate, result in a Material Adverse Change. To ensure compliance with the Privacy Laws, the Company and the Subsidiaries its subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling handling, and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matter, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email e-mail address, photograph, social security number or tax identification number, driver’s license number, passport number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by the GDPR; . The Company and (iv) any other piece of information that allows its subsidiaries have at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, except as would not, individually or in the identification of such natural personaggregate, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, or deceptive in violation of any Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of Material Adverse Change. The Company further certifies that neither it nor any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, subsidiary: (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy Law; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy Law, except with respect to subsection (i), (ii) and (iii) as would not, individually or in the aggregate, result in a Material Adverse Change.

Compliance with Data Privacy Laws. Except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, (i) The the Company and the Subsidiaries its subsidiaries are, and at all prior times during the past three years were, in compliance with all applicable state and federal data privacy and security laws and regulations, includingincluding without limitation HIPAA, as applicableCCPA, and the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) (collectively, the “Privacy Laws”); ) and (ii) the Company has at all times made all disclosures to users or customers required by applicable Privacy Laws and the Subsidiaries have in place, comply withregulatory rules or requirements promulgated thereunder, and take appropriate steps reasonably designed no such disclosures , to ensure compliance with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling and analysis of Personal Data (the “Policies”); (iii) the Company provides accurate notice of its applicable Policies to its customers, employees, third party vendors and representatives as required by Privacy Laws; and (iv) applicable Policies provide accurate and sufficient notice of the Company’s then-current privacy practices relating to its subject matterknowledge, and do not contain any material omissions of the Company’s then-current privacy practices, as required by Privacy Laws. “Personal Data” means (i) a natural person’s name, street address, telephone number, email address, photograph, social security number, bank information, or customer or account number; (ii) any information which would qualify as “personally identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by GDPR; and (iv) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection or analysis of any identifiable data related to an identified person’s health or sexual orientation. None of such disclosures made or contained in any of the Policies have been inaccurate, misleading, inaccurate or deceptive in violation of any applicable Privacy Laws and the execution, delivery and performance of this Agreement will not result in a breach of regulatory rules or requirements promulgated thereunder. The Company further certifies that neither it nor any Privacy Laws or Policies. Neither the Company nor the Subsidiaries, subsidiary: (i) has, to the knowledge of the Company, has received written notice of any actual or potential liability of the Company under or the Subsidiaries underrelating to, or actual or potential violation by the Company or the Subsidiaries of, any of the Privacy Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation remediation, or other corrective action pursuant to any regulatory request or demand pursuant to any Privacy LawLaws; or (iii) is a party to any order, decree, or agreement by or with any court or arbitrator or governmental or regulatory authority that imposed imposes any obligation or liability under any Privacy LawLaws. Any certificate signed by any duly authorized executive officer of the Company or any of its subsidiaries and intentionally delivered to any Underwriter or to counsel for the Underwriters in connection with the offering, or the purchase and sale, of the Offered Shares shall be deemed a representation and warranty by the Company to each Underwriter as to the matters covered thereby. The Company has a reasonable basis for making each of the representations set forth in this Section 1. The Company acknowledges that the Underwriters and, for purposes of the opinions to be delivered pursuant to Sections 6(d), (e) and (f), counsel to the Company and counsel to the Underwriters, will rely upon the accuracy and truthfulness of the foregoing representations and hereby consents to such reliance.