United States patents and patent applications included in the Intellectual Property have been complied with; and in all foreign offices having similar requirements during the prosecution of the
United States and foreign patents and patent applications, as applicable, included in the Intellectual Property owned by the Company have been complied with.
(x) Trade Secrets. To the Companys knowledge, the Company and its subsidiaries have taken commercially reasonable actions to
protect their rights in and prevent the unauthorized use and disclosure of material trade secrets and confidential business information (including confidential source code, ideas, research and development information,
know-how, formulas, compositions, technical data, designs, drawings, specifications, research records, records of inventions, test information, financial, marketing and business data, customer and supplier
lists and information, pricing and cost information, business and marketing plans and proposals) owned by the Company and its subsidiaries, and there has been no unauthorized use or disclosure of such material trade secrets or confidential business
information, except as any such unauthorized use or disclosure would not reasonably be expected, individually or in the aggregate, to have a Material Adverse Effect.
(y) IT Assets, Data Privacy and Security. Except as would not, individually or in the aggregate, reasonably be expected to have a
Material Adverse Effect, (i) the computers, websites, applications, databases, software, servers, networks, data communications lines, and other information technology systems owned, licensed, leased or otherwise used by the Company and its
subsidiaries (excluding any public networks) (collectively, the IT Assets) are adequate for, and operate and perform for, the operation of the business of the Company and its subsidiaries as currently conducted, and (ii) the IT
Assets are free and clear of all viruses, vulnerabilities, bugs, errors, defects, Trojan horses, time bombs, malware and other corruptants. Except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse
Effect, the Company and its subsidiaries have implemented and maintained commercially reasonable controls, policies, procedures, and safeguards to maintain and protect their confidential information and the privacy, confidentiality, integrity,
continuous operation, redundancy and security of all IT Assets and data (including all Personal Data (defined below), sensitive, confidential, or regulated data (collectively, Confidential Data)) used in connection with their businesses.
There have been no breaches of, violations of, outages of, or unlawful or unauthorized uses of, or accesses to IT Assets and no unlawful or unauthorized uses of, destruction of, losses of, alterations of, or accesses to Confidential Data, nor any
such incidents under internal review or investigation, except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect. Except as would not, individually or in the aggregate, reasonably be expected to
have a Material Adverse Effect, the Company and its subsidiaries comply, and have complied, with (i) applicable laws, statutes, regulations, directives, and industry standards concerning the protection, collection, use, disclosure, transfer,
storage, disposal, privacy, confidentiality, integrity and security of Confidential Data (including to the extent applicable, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) as amended by the Health Information
Technology for Economic and Clinical Health Act (the HITECH Act); the European Union General Data Protection Regulation (GDPR) (EU 2016/679); and the California Consumer Privacy Act (CCPA) (collectively, the
Privacy Laws)), and (ii) all judgments, orders, rules and regulations of any court or arbitrator or governmental or regulatory authority, policies, procedures, and contractual obligations relating to the privacy and security of IT
Assets and Confidential Data and to the protection of such IT Assets and Confidential Data from unlawful or unauthorized use, destruction, loss, alteration, access, misappropriation or modification (collectively, the Data Protection
Requirements). To the extent required by the Privacy Laws, except as would not, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect, the Company and its subsidiaries have made all required disclosures to
and obtained all necessary consents from individuals (including, without limitation, clinical trial participants, customers, users, and personnel) for the Companys and its subsidiaries collection, use, disclosure, transfer, and other
processing of Confidential Data, and complied with all such disclosures and consents. To the knowledge of the Company, none of such disclosures made or contained in any policies or notices have been inaccurate,