proceeds to any subsidiary, joint venture partner or other person or entity, for the purpose of financing or facilitating the activities of any person, or in any country or territory, that at the
time of such financing or facilitation and currently is the subject or target of Sanctions or in any other manner that will result in a violation by any person (including any person participating in the transaction whether as an underwriter,
advisor, investor or otherwise) of Sanctions. Since April 24, 2019, the Company and its subsidiaries have not knowingly engaged in, are not now knowingly engaged in, and will not engage in, any dealings or transactions with any individual or
entity, or in any country or territory, that at the time of the dealing or transaction, is or was the subject or target of Sanctions.
(aaa) Except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, the Company and its
subsidiaries information technology assets and equipment, computers, systems, networks, hardware, software, websites, applications, and databases (collectively, IT Systems) are adequate for the operation of the
business of the Company or its subsidiaries as currently conducted, free and clear, to the knowledge of the Company, of all bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. The Company and its subsidiaries have
implemented and maintained commercially reasonable controls, policies, procedures, and safeguards to maintain and protect their material confidential information and the integrity, continuous operation, redundancy and security of all IT Systems and
data (including any personal, personally identifiable, sensitive, confidential or regulated data (including the data and information of its customers, employees, suppliers, vendors and any third-party data collected, processed or stored by the
Company or any of its subsidiaries, and any such data processed or stored by third parties on behalf of the Company or any of its subsidiaries) collected, processed, transferred, held, disclosed or otherwise used in connection with their businesses
(collectively, Personal Data)) and, except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, there has been no breach, violation, outage, disablement, loss,
destruction or unauthorized use, access, distribution or modification of or to any IT System or Personal Data of the Company or its subsidiaries.
(bbb) The Company and each of its subsidiaries are, and at all times since January 1, 2018 were, in compliance with all applicable data
privacy and security laws, statutes, judgments, orders, rules and regulations of any court or arbitrator or any other governmental or regulatory authority and all applicable laws and contractual obligations regarding the collection, processing, use,
transfer, storage, protection, disposal or disclosure by the Company and its subsidiaries of Personal Data (collectively, the Privacy Obligations) except where the failure to be in compliance would not, individually or in
the aggregate, reasonably be expected to have a Material Adverse Effect. The Company and its subsidiaries have in place, are in material compliance with, and take appropriate steps reasonably designed to (i) ensure compliance with its privacy
policies; and (ii) reasonably protect the security and confidentiality of all Personal Data (collectively, the Policies). Since January 1, 2018, neither the Company nor any of its subsidiaries has received notice
of any actual or potential material liability under or relating to or actual or potential violation of, or is subject to any action, suit or proceeding by or before any court of governmental agency authority or body relating to, any of the Privacy
Obligations or Policies.
(ccc) [Reserved]
14