Common use of Privacy and Data Protection Clause in Contracts

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and has operated its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have has been and are is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Pricing General Disclosure Package and in the Prospectus. The Company and its Subsidiaries have has used commercially reasonable efforts to establish, and have has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company and its Subsidiaries. The Company and its Subsidiaries have has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tothat have not, individually singly or in the aggregate, result resulted in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company and its Subsidiaries have has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and has operated its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have has been and are is in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have has taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries Company and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Pricing Time of Sale Disclosure Package and in the Prospectus. The Company and its Subsidiaries have has used commercially reasonable efforts to establish, and have has established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company. To the Company’s knowledge, the Company and its Subsidiaries. The Company and its Subsidiaries have has not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Company and its Subsidiaries have has not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance in all material respects with such policies and procedures. The Company and its Subsidiaries subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiariessubsidiaries. The Company and its Subsidiaries subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tonot, individually or in the aggregate, result in a Material Adverse Effectbe material to the Company or any of its subsidiaries; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance in all material respects with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package Statement and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected tonot, individually or in the aggregate, result in a Material Adverse Effectbe material to the Company or any of its Subsidiaries; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries the Subsidiary have operated their business in a manner compliant in all material respects with all United States federal, state and local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries the Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure protect the integrity and security of the data collected, handled or stored in connection with its their business; the Company and its Subsidiaries the Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure promote compliance with the Health Care Laws that govern privacy and data security and take, take and have taken reasonably appropriate steps designed to assure attain compliance with such policies and procedures. The Company and its Subsidiaries the Subsidiary have taken reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries the Subsidiary and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries the Subsidiary (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries the Subsidiary as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries the Subsidiary have used reasonable efforts to establish, and have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiariesthe Subsidiary. The To the Company’s knowledge, after due inquiry, (i) the Company and its Subsidiaries the Subsidiary have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, (ii) there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries the Subsidiary have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures reasonably designed to ensure protect the integrity and security of the data collected, handled or stored in connection with its business, including administrative, technical and physical safeguards with respect to the security, confidentiality and integrity of transactions and Sensitive Company Data (as defined below); the Company and its Subsidiaries have been and are in compliance in all material respects with the internal policies and procedures reasonably designed to ensure promote compliance with the Health Care Laws laws and regulations that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure attain compliance with such policies and procedures. The Company and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, and information identifiable to a consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are reasonably adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company DataData (including the data and information of their respective customers, employees, suppliers, vendors and any third party data maintained, processed or stored by the Company and its subsidiaries, and any such data processed or stored by third parties on behalf of the Company and its subsidiaries), except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects complied with all privacyUnited States federal, state, local and non-United States privacy (including, but not limited to, the General Data Protection Regulation (EU) 2016/679, “GDPR”), data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data, except for any noncompliance that would not reasonably be expected to have a Material Adverse Effect. The In each case except for any noncompliance that would not reasonably be expected to have a Material Adverse Effect, the Company and its Subsidiaries have been and are in compliance in all material respects with (1) internal policies and procedures designed to appropriately ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with (2) internal policies and procedures designed to appropriately ensure compliance with the Health Care Laws that govern privacy and data security and take, and have the Company has taken reasonably appropriate steps designed to assure ensure compliance with such internal policies and procedures. The Company and its Subsidiaries have taken reasonable appropriate steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing French Disclosure Document, the General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, knowledge there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and each of its Subsidiaries subsidiaries have operated their business respective businesses in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s Company and its subsidiaries’ collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries subsidiaries have taken all reasonable steps necessary to maintain the confidentiality of its their respective personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries subsidiaries and any third parties in the possession of the Company or any of its possession subsidiaries (“Sensitive Company Data”). Neither the Company nor any of its subsidiaries has received any notice, claim, complaint, demand or letter from any person in respect of their respective businesses under applicable data security and data protection laws and regulations and industry standards regarding misuse, loss, unauthorized destruction or unauthorized disclosure of any Sensitive Company Data. The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and or any of its Subsidiariessubsidiaries. The Neither the Company and nor any of its Subsidiaries have not subsidiaries has suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, nor has there has been no any unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such breaches, compromises, incidents or unauthorized or illegal use or access would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Neither the Company and nor any of its Subsidiaries have not subsidiaries has been required to notify any individual or data protection authority of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational in all material respects for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities plans for the business consistent with industry standards and practices of similarly-sized companies in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and and, to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use of or access would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries the Subsidiary have operated their business in a manner compliant in all material respects with all United States federal, state and local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries the Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure protect the integrity and security of the data collected, handled or stored in connection with its their business; the Company and its Subsidiaries the Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure promote compliance with the Health Care Laws that govern privacy and data security and take, take and have taken reasonably appropriate steps designed to assure attain compliance with such policies and procedures. The Company and its Subsidiaries the Subsidiary have taken reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries the Subsidiary and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries the Subsidiary (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries the Subsidiary as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries the Subsidiary have used reasonable efforts to establish, and have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiariesthe Subsidiary. The To the Company’s knowledge, after due inquiry, (A) the Company and its Subsidiaries the Subsidiary have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, (B) there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries the Subsidiary have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated operate their business in a manner compliant in all material respects with all United States federal, state, local, foreign and international privacy, data security and data protection laws and binding regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of any information that constitutes “personal information,” “personal data” or “personally identifiable information” as defined in applicable laws (“Personal Information”). The Company and its Subsidiaries have been and are in compliance in all material respects with their respective internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its their business; the . The Company and its Subsidiaries have been and are in compliance in all material respects with their respective internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate take reasonable steps designed to assure ensure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable informationtheir Personal Information , protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and other data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries, and the Company and its Subsidiaries have been and are in compliance with internal policies and procedures reasonably designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken, reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party; in each case, except where such breaches, compromises, incidents, use or access, would not, individually or in the aggregate, be material to the Company or any of its Subsidiaries. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data. The Company is presently in material compliance with all applicable laws and contractual obligations relating to the privacy and security of the Company IT Assets and Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are are, in all material respects, adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse EffectChange; and and, to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package Package, Time of Sale Prospectus and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, reasonably be expected to result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws health care laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data IT Systems and hardware), software and telecommunications systems Data used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets Systems and data Data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Systems and Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset Systems and Data or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local, foreign and international privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure ensure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and other data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are presently in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are presently in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or or, to the knowledge of the Company, any Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or or, to the knowledge of the Company, any Sensitive Company Data Data, by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its their respective business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the their respective business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated operate their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken take reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated operate their business in a manner compliant in all material respects with all United States federal, state, local, foreign and international privacy, data security and data protection laws and binding regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of any information that constitutes “personal information,” “personal data” or “personally identifiable information” as defined in applicable laws (“Personal Information”). The Company and its Subsidiaries have been and are in compliance in all material respects with their respective internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its their business; the . The Company and its Subsidiaries have been and are in compliance in all material respects with their respective internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate take reasonable steps designed to assure ensure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable informationtheir Personal Information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and other data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse EffectChange; and to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are presently in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are presently in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are in all material respects adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or or, to the knowledge of the Company, any Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or or, to the knowledge of the Company, any Sensitive Company Data Data, by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata (“Privacy Laws”). The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure protect the integrity and security of the personal data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with all Company internal policies and procedures designed relating to ensure compliance with the applicable Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure maintain compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are (A) adequate and operational for, in accordance material conformance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now currently operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the ProspectusProspectus and (B) to the knowledge of the Company, free and clear of Trojan horses, time bombs, malware, harmful code or other corruptants. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data. The Company and its Subsidiaries have at all times complied in all material respects with all of the following, as they relate to the protection, collection, use, disclosure, transfer, storage, disposal, confidentiality, integrity, availability, processing, privacy and security of Company IT Assets and Sensitive Company Data: (A) Privacy Laws; (B) all judgments, orders, rules and regulations of any court or arbitrator or governmental or regulatory authority; (C) internal or external policies; and (D) contractual obligations (collectively, “Data Protection Requirements”). The Company and each of its Subsidiaries (A) have not received notice of any actual or potential liability under or relating to, or actual or potential violation of, Data Protection Requirements, (B) have no knowledge of any fact or circumstance that would reasonably indicate the Company or one of its Subsidiaries is not in compliance with any of the Data Protection Requirements; (C) are not currently participating, in whole or in part, in any investigation, remediation or other corrective action relating to any of the Data Protection Requirements; and (D) are not a party to any order, decree or agreement by any court or arbitrator or governmental or regulatory authority that imposes any obligation or liability relating to any Data Protection Requirement.

Privacy and Data Protection. The Company and its Subsidiaries subsidiaries have operated their business in a manner compliant in all material respects with all privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata except where any noncompliance would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal their respective published privacy policies and with their internal security procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; business except where any noncompliance would not reasonably be expected to, singly or in the Company and its Subsidiaries have been and are aggregate, result in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and proceduresa Material Adverse Effect. The Company and its Subsidiaries subsidiaries have taken reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information that they process in connection with their operation of the Company, its Subsidiaries and any third parties in its possession business (“Sensitive Company Data”). The To the knowledge of the Company, the tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiariessubsidiaries. The To the knowledge of the Company, neither the Company and nor its Subsidiaries have not subsidiaries has suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and ;. For the past three years, to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The the Company and its Subsidiaries subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries Subsidiary have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data, except where the failure to so comply would not reasonably be expected, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business, except where the failure to so comply would not reasonably be expected, singly or in the aggregate, result in a Material Adverse Effect; the Company and its Subsidiaries Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures, except where the failure to so comply would not reasonably be expected, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries Subsidiary have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries Subsidiary and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries Subsidiary (the “Company IT Assets”) are adequate and operational operational, in all material respects, for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries Subsidiary as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries Subsidiary have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its SubsidiariesSubsidiary. The Neither the Company and nor its Subsidiaries Subsidiary have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and and, to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries Subsidiary have not been required to notify any individual of any material information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business businesses in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s and its Subsidiaries’ collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedurestheir businesses. The Company and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and or its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business businesses of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, in the Pricing Time of Sale Disclosure Package and in the Prospectus. The Company and its Subsidiaries have used commercially reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respectspractices, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The To the Company’s knowledge, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such unauthorized or illegal use or access would not reasonably be expected to, individually or in the aggregate, have a Material Adverse Effect. The Neither the Company and nor its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all privacyPrivacy Laws, data security and data protection laws the Company and regulations applicable its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are compliant in all material aspects with, the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) including the GDPR as it forms part of personal dataUnited Kingdom law by virtue of section 3 of the European Union (Withdrawal) Act 2018. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity integrity, availability and security of the data collected, handled handled, stored or stored otherwise processed in connection with its businessbusiness and with all external privacy policies and notices, and all such notices have been legally adequate and accurate; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Privacy Laws and Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate taken, commercially reasonable steps designed to assure compliance with such policies and procedures. The Company, its Subsidiaries, and, to the their knowledge, any third parties processing information on behalf of the Company and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable informationPersonal Information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession or control (collectively, “Sensitive Company Data”). The Company and its Subsidiaries have contractually obligated all third parties that process Sensitive Company Data on their behalf to data protection obligations that comply with applicable Privacy Laws, including (i) to comply with applicable Privacy Laws, (ii) to take reasonable steps to protect and security Sensitive Company Data, and (iii) to act only in accordance with the instructions of the Company. The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package Statement and the Prospectus. The Company, its Subsidiaries, and, to the their knowledge, any third-parties processing information on behalf of the Company and its Subsidiaries have used commercially reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company DataAsset, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledgeand, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual individual, regulator or other third party of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries Subsidiary have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations (“Privacy Laws”), policies and procedures, contractual obligations and applicable industry standards applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata (collectively, the “Data Protection Requirements”). The Company and its Subsidiaries Subsidiary have been implemented and are in compliance in all material respects with internal maintained policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its businessbusiness in accordance with the Privacy Laws; the Company and its Subsidiaries Subsidiary have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures, except where such non-compliance or the failure to take such steps would not, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries Subsidiary have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other sensitive, confidential or regulated information of the Company, its Subsidiaries Subsidiary and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries Subsidiary (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, operate and perform as required for the business of the Company and its Subsidiaries Subsidiary as now currently operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus, and in accordance with their documentation and functional specifications. The Company IT Assets are free and clear of all material bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company and its Subsidiaries Subsidiary have used reasonable efforts to establish, established and have establishedmaintained, commercially reasonable disaster recovery and security plans, procedures procedures, safeguards and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its SubsidiariesSubsidiary. The Company and its Subsidiaries Subsidiary have not suffered or incurred any security breachesbreaches or incidents, unauthorized access or disclosure, or compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, incidents, access, disclosure or compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, knowledge there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries Subsidiary have not been notified of, have not been required to notify any individual or governmental or regulatory authority of and have no knowledge of any event or condition that could result in, any information security breach, compromise or incident involving Sensitive Company Data. Neither the Company nor any Subsidiary (i) has received notice of any actual or potential liability under or relating to, or actual or potential violation of, any Data Protection Requirement, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice, (ii) is currently conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Data Protection Requirement, or (iii) is a party to any order, decree, or agreement that imposes any obligation or liability by any governmental or regulatory authority under any Data Protection Requirement. The execution, delivery and performance of this Agreement or any other agreement referred to in this Agreement will not result in a breach of any Data Protection Requirement.

Privacy and Data Protection. The Company and its Subsidiaries have operated operate their business in a manner compliant in all material respects with all United States federal, state, local, foreign and international privacy, data security and data protection laws and binding regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of any information that constitutes “personal information,” “personal data” or “personally identifiable information” as defined in applicable laws (“Personal Information”). The Company and its Subsidiaries have been and are in compliance in all material respects with their respective internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its their business; the . The Company and its Subsidiaries have been and are in compliance in all material respects with their respective internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate take reasonable steps designed to assure ensure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable informationtheir Personal Information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and other data held or used by or for the Company and its Subsidiaries. The To the knowledge of the Company, the Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the knowledge of the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries subsidiaries have operated their business in a manner compliant in all material respects with all privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata except where any noncompliance would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal their respective published privacy policies and with their internal security procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; business except where any noncompliance would not reasonably be expected to, singly or in the Company and its Subsidiaries have been and are aggregate, result in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and proceduresa Material Adverse Effect. The Company and its Subsidiaries subsidiaries have taken reasonable steps to maintain the confidentiality of its the personally identifiable information, protected health information, consumer information and other confidential information that they process in connection with their operation of the Company, its Subsidiaries and any third parties in its possession business (“Sensitive Company Data”). The To the knowledge of the Company, the tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiariessubsidiaries. The To the knowledge of the Company, neither the Company and nor its Subsidiaries have not subsidiaries has suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The For the past three years, to the knowledge of the Company, the Company and its Subsidiaries subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects complied with all privacyUnited States federal, state, local and non-United States privacy (including, but not limited to, the General Data Protection Regulation (EU) 2016/679, “GDPR”), data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data, except for any noncompliance that would not reasonably be expected to have a Material Adverse Effect. The In each case except for any noncompliance that would not reasonably be expected to have a Material Adverse Effect, the Company and its Subsidiaries have been and are in compliance in all material respects with (1) internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with (2) internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have the Company has taken reasonably appropriate steps designed to assure compliance with such internal policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package Package, the Prospectus and the French Listing Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, knowledge there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all U.S. federal, state, local and non-U.S. privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal datadata and the Company and its subsidiaries have taken commercially reasonable actions to prepare to comply with, and since May 25, 2018, have been and currently are compliant in all material aspects with, the European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) including the GDPR as incorporated into the law of the United Kingdom and as amended, and as implemented and supplemented by the Data Protection ▇▇▇ ▇▇▇▇. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its businessbusiness and all external privacy policies; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate commercially reasonable steps designed to assure compliance with such policies and procedures. The Company, its Subsidiaries, and, to the their knowledge, any third parties processing information on behalf of the Company and its Subsidiaries have taken commercially reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package Statement and the Prospectus. The Company, its Subsidiaries, and, to the their knowledge, any third-parties processing information on behalf of the Company and its Subsidiaries have used commercially reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledgeand, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and each of its Subsidiaries subsidiaries have operated their business respective businesses in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s Company and its subsidiaries’ collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries subsidiaries have taken all reasonable steps necessary to maintain the confidentiality of its their respective personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries subsidiaries and any third parties in the possession of the Company or any of its possession subsidiaries (“Sensitive Company Data”). Neither the Company nor any of its subsidiaries has received any notice, claim, complaint, demand or letter from any person in respect of their respective businesses under applicable data security and data protection laws and regulations and industry standards regarding misuse, loss, unauthorized destruction or unauthorized disclosure of any Sensitive Company Data. The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package and the ProspectusProspectus Supplement. The Company and its Subsidiaries subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and or any of its Subsidiariessubsidiaries. The Neither the Company and nor any of its Subsidiaries have not subsidiaries has suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, nor has there has been no any unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such breaches, compromises, incidents or unauthorized or illegal use or access would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Neither the Company and nor any of its Subsidiaries have not subsidiaries has been required to notify any individual or data protection authority of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and each of its Subsidiaries subsidiaries have operated their business respective businesses in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s Company and its subsidiaries’ collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries subsidiaries have taken all reasonable steps necessary to maintain the confidentiality of its their respective personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries subsidiaries and any third parties in the possession of the Company or any of its possession subsidiaries (“Sensitive Company Data”). Neither the Company nor any of its subsidiaries has received any notice, claim, complaint, demand or letter from any person in respect of their respective businesses under applicable data security and data protection laws and regulations and industry standards regarding misuse, loss, unauthorized destruction or unauthorized disclosure of any Sensitive Company Data. The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package Statement and the Prospectus. The Company and its Subsidiaries subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and or any of its Subsidiariessubsidiaries. The Neither the Company and nor any of its Subsidiaries have not subsidiaries has suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, nor has there has been no any unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such breaches, compromises, incidents or unauthorized or illegal use or access would not reasonably be expected to, singly or in the aggregate, result in a Material Adverse Effect. The Neither the Company and nor any of its Subsidiaries have not subsidiaries has been required to notify any individual or data protection authority of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party, except where such breaches, compromises, incidents, use or access would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state and local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its their business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its their personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its their possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, Data except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing Disclosure Package Statement and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually singly or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business at all times protected and maintained the confidentiality and integrity of all personal information, protected health information, consumer information and any other confidential or proprietary information of the Company, its Subsidiaries or any third parties in a manner compliant its possession or under its control (collectively, “Company Data”). The Company and its Subsidiaries have been in compliance in all material respects with all privacy, data security and data protection laws laws, rules, and regulations applicable to the Company’s collection, use, processing, transfer, protection, disposal, disclosure, handling, storage and analysis of personal dataCompany Data, including any internal- or external-facing policies and procedures or contractual obligations related thereto (collectively, “Data Protection Requirements”). The Company has provided all requisite notices and obtained any required consents, and satisfied any other requirements necessary for the lawful processing of Company Data as currently conducted and in relation to the consummation of the proposed transaction. The Company and its Subsidiaries have been implemented and are in compliance in all material respects maintain reasonable and appropriate administrative, technical, and physical measures consistent with internal policies and procedures designed to ensure the integrity and security state of the data collected, handled or stored art for the industry in connection with its business; which the Company and its Subsidiaries have been and are in compliance in all material respects operates to comply with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”)Data Protection Requirements. The tangible or and digital information technology systems (including computers, devices, mobile services, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data data, equipment and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are adequate and operational foroperate, in accordance with their documentation and functional specifications, specifications to support the business of the Company and its Subsidiaries as Subsidiaries, now operated and as currently proposed to be conducted as described envisaged in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. To the Company’s knowledge, no Company IT Assets contain any virus, “time bomb”, “back door”, “trap door”, Trojan horse, spyware, keylogger software, worm or other software routines, faults, malicious code, damaging devices, or hardware components designed to permit misuse of Company IT Assets or any data thereon. The Company and its Subsidiaries have used reasonable efforts established and maintain a commercially reasonable, written program to establishprotect Company Data against unauthorized access, use, disclosure, deletion, destruction, or alteration. The Company and its Subsidiaries have established, established commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for Company Data. For the Company and its Subsidiaries. The past five (5) years, the Company and its Subsidiaries have not suffered or incurred any actual or reasonably suspected security breachesbreach, compromises compromise or incidents with respect to other incident resulting in the unauthorized access, acquisition, interruption, alteration, modification, loss, theft, corruption or use of any Company IT Asset or Sensitive Company DataData (“Security Incident”), except where such breaches, compromises or incidents would Security Incident could not reasonably be expected toexpected, individually or in the aggregate, to result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify (nor voluntarily notified) any individual or governmental authority of any information security breachSecurity Incident, compromise and there is not currently, nor has there ever been, any pending or incident involving Sensitive threatened action, proceeding, investigation, suit or claim against the Company with respect to the Company’s compliance with Data Protection Requirements or its processing of Company Data.

Privacy and Data Protection. The Company and its Subsidiaries have operated their business in a manner compliant in all material respects with all United States federal, state, local and non-United States privacy, data security and data protection laws and regulations applicable to the Company’s collection, use, transfer, protection, disposal, disclosure, handling, storage and analysis of personal data. The Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure the integrity and security of the data collected, handled or stored in connection with its business; the Company and its Subsidiaries have been and are in compliance in all material respects with internal policies and procedures designed to ensure compliance with the Health Care Laws that govern privacy and data security and take, and have taken taken, reasonably appropriate steps designed to assure compliance with such policies and procedures. The Company and its Subsidiaries have taken reasonable steps to maintain the confidentiality of its personally identifiable information, protected health information, consumer information and other confidential information of the Company, its Subsidiaries and any third parties in its possession (“Sensitive Company Data”). The tangible or digital information technology systems (including computers, screens, servers, workstations, routers, hubs, switches, networks, data communications lines, technical data and hardware), software and telecommunications systems used or held for use by the Company and its Subsidiaries (the “Company IT Assets”) are are, in all material respects, adequate and operational for, in accordance with their documentation and functional specifications, the business of the Company and its Subsidiaries as now operated and as currently proposed to be conducted as described in the Registration Statement, the Pricing General Disclosure Package and the Prospectus. The Company and its Subsidiaries have used reasonable efforts to establish, and have established, commercially reasonable disaster recovery and security plans, procedures and facilities for the business consistent with industry standards and practices in all material respects, including, without limitation, for the Company IT Assets and data held or used by or for the Company and its Subsidiaries. The Company and its Subsidiaries have not suffered or incurred any security breaches, compromises or incidents with respect to any Company IT Asset or Sensitive Company Data, except where such breaches, compromises or incidents would not reasonably be expected to, individually or in the aggregate, result in a Material Adverse Effect; and to the Company’s knowledge, there has been no unauthorized or illegal use of or access to any Company IT Asset or Sensitive Company Data by any unauthorized third party. The Company and its Subsidiaries have not been required to notify any individual of any information security breach, compromise or incident involving Sensitive Company Data.