Company: NWFL
Filing Date: 2025-07-07
Form Type: 425
Source: 0001193125-25-156258
Chunk: 58

Company: NORWOOD FINANCIAL CORP
Filing Date: 2025-07-07
Form: 425
Chunk 58
---
 defined in Section 29(g)(1) of the FDIC Act
or are subject to any encumbrance, legal restraint or other legal process (other than garnishments, pledges, set off rights, escrow limitations and similar actions taken in the ordinary course of business), and no portion of such deposits represents
a deposit of any Affiliate of Bankshares or any Bankshares Subsidiary.

Section 3.26 .

(a) Bankshares has in place “disclosure controls and procedures” as defined in Rules
13a-15(e) and 15d-15(e) of the Exchange Act to allow Bankshares’s management to make timely decisions regarding required disclosures and to make the certifications
of the Chief Executive Officer and Chief Financial Officer of Bankshares required under the Exchange Act.

(b) Bankshares has designed and
maintains a system of internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) sufficient to provide reasonable
assurance concerning the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP as consistently applied by Bankshares, including reasonable assurance (i) that transactions
are executed in accordance with management’s general or specific authorizations and recorded as necessary to permit preparation of financial statements in conformity with GAAP as consistently applied by Bankshares and to maintain asset
accountability, (ii) access to assets is permitted only in accordance with management’s general or specific authorizations, and (iii) the recorded accountability for assets is compared with existing assets at reasonable intervals and
appropriate action is taken with respect to any difference.

Section 3.27 .

(a) Bankshares and each of the Bankshares Subsidiaries (i) has collected Personal Information in compliance, in all material respects,
with all applicable Privacy Laws; (ii) has the requisite consent or other authority under all applicable laws regarding the collection, use, storage, disclosure, or other processing of Personal Information to use, disclose, store, and otherwise
process Personal Information, which consent or other authority is sufficient for the business as currently conducted; and (iii) has taken commercially reasonable steps to secure the business data related to Bankshares’s and the Bankshares
Subsidiaries’ business from unauthorized access or unauthorized use by any Person. No communication from any Governmental Entity with respect to or alleging non-compliance with any law regarding the
collection, use, storage, disclosure or other processing of Personal Information has