(19) Cybersecurity. (A) (i) The Transaction Entities and each of the
Subsidiaries have materially complied and are presently in material compliance with all internal and external privacy policies, contractual obligations, industry standards, applicable laws, statutes, judgments, orders, rules and regulations of any
court or arbitrator or other governmental or regulatory authority and any other legal obligations, in each case, relating to the collection, use, transfer, import, export, storage, protection, disposal and disclosure by the Transaction Entities or
any of the Subsidiaries of personal, personally identifiable, household, sensitive, confidential or regulated data (Data Security Obligations, and such data, Data); (ii) none of the Transaction
Entities or the Subsidiaries has received any notification of or complaint regarding and is unaware of any other facts that, individually or in the aggregate, would reasonably indicate material non-compliance
with any Data Security Obligation; and (iii) there is no action, suit or proceeding by or before any court or governmental agency, authority or body pending or, to the knowledge of the Transaction Entities, threatened alleging non-compliance with any Data Security Obligation that would, singly or in the aggregate, result in a Material Adverse Effect. (B) The Transaction Entities and the Subsidiaries have used reasonable efforts to
establish and maintain, and have established, maintained, implemented and materially complied with, reasonable information technology, information security, cyber security and data protection controls, policies and procedures, including oversight,
access controls, encryption, technological and physical safeguards and business continuity/disaster recovery and security plans that are designed to protect against and prevent breach, destruction, loss, unauthorized distribution, use, access,
disablement, misappropriation or modification, or other compromise or misuse of or relating to any information technology system or Data used in connection with the operation of the Transaction Entities and the Subsidiaries businesses
(Breach). To the knowledge of the Transaction Entities, there has been no such Breach that would, singly or in the aggregate, result in a Material Adverse Effect, and the Transaction Entities and the Subsidiaries have not
been notified of and have no knowledge of any event or condition that would reasonably be expected to result in, any such Breach that would, singly or in the aggregate, result in a Material Adverse Effect.
(20) Absence of Further Requirements. No filing with, or authorization, approval, consent, license, order, registration,
qualification or decree of, any court or governmental authority or agency is necessary or required for the performance by either of the Transaction Entities of its respective obligations under the Transaction Documents, in connection with the
offering, issuance or sale of the Securities hereunder or the consummation of the transactions contemplated by this Agreement, the Indenture and the Securities, except such as have been already obtained or as may be required under the 1933 Act or
the 1934 Act or state securities laws or blue sky laws or as may be required by Financial Industry Regulatory Authority (FINRA) or required by the NYSE in connection with the listing of the Securities.
(21) Absence of Manipulation. Neither the Transaction Entities or any of their affiliates has taken, nor will take, directly or
indirectly, any action which is designed to or which has constituted or which would reasonably be expected to cause or result in stabilization or manipulation of the price of any security of the Transaction Entities to facilitate the sale or resale
of the Securities.
(22) Possession of Licenses and Permits. The Transaction Entities and the Subsidiaries possess such
permits, licenses, approvals, consents and other authorizations (collectively, Governmental Licenses) issued by the appropriate federal, state, local or foreign regulatory agencies or bodies necessary to conduct their
business as described in the General Disclosure Package and the Prospectus, except where the failure so to possess would not, singly or in the aggregate, result in a Material Adverse Effect; the Transaction Entities and the Subsidiaries are in
compliance with the terms and conditions of all such Governmental Licenses, except where the failure so to comply would not, singly or in the aggregate, result in a Material Adverse Effect; all of the Governmental Licenses are valid and in full
force and effect, except where the invalidity of such Governmental Licenses or the failure of
-9-