definiens: ( as defined in 45 C.F.R. Part 164, Subpart D ) of unsecuredProtected Health Information or of EU Personal Data . The Company has not ( nor have any Persons acting on theCompany ’s behalf ) notified, and the Company has not experienced any event resulting in any requirement that theCompany notify, any Person or Data Protection Authority of any Security Incident, including any loss or unauthorizedaccess, use or disclosure, of EU Personal Data or of Protected Health Information that would constitute a breach forwhich notification to individuals, the media, or the United States Department of Health and Human Services ( ) isrequired under 45 C.F.R. Part 164, Subpart D. In addition, the Company does not have any material data security, information security or other technological vulnerabilities that could adversely impact the operation of relevant ITAssets or cause a Security Incident