Company: NWFL
Filing Date: 2025-09-19
Form Type: S-4
Source: 0001193125-25-208580
Chunk: 321

Company: NORWOOD FINANCIAL CORP
Filing Date: 2025-09-19
Form: S-4
Chunk 321
---
 and the Norwood Subsidiaries’ business from unauthorized access or unauthorized use by any Person. No communication from any Governmental Entity with respect to or alleging
non-compliance with any law regarding the collection, use, storage, disclosure or other processing of Personal Information has been received by Norwood or any of the Norwood Subsidiaries. A copy of all
internally or externally prepared reports or audits that describe or evaluate the information security procedures of Norwood or the Norwood Subsidiaries, all material policies related thereto and any failures to comply therewith have been provided
to Bankshares. Except as set forth on Schedule 4.13(a), to the Knowledge of Norwood, there has been no unauthorized access gained by any Person to Personal Information held or collected by Norwood or any

A-36

Norwood Subsidiary, their employees, or third party contractors in the course of conducting Norwood’s and the Norwood Subsidiaries’ business.

(b) Norwood and each of the Norwood Subsidiaries is subject to a written information privacy and security program that maintains commercially
reasonable measures to protect the privacy, confidentiality and security of all Personal Information against any Security Breach. Except as set forth in Schedule 4.13(b), since December 31, 2024, neither Norwood nor any Norwood Subsidiary has,
to its Knowledge, experienced any Security Breach and there are no data security or other technological vulnerabilities with respect to Norwood’s or the Norwood Subsidiaries’ information technology systems or networks.

Section 4.14

(a) Norwood has in place “disclosure controls and procedures” as defined in Rules 13a-15(e)
and 15d-15(e) of the Exchange Act to allow Norwood’s management to make timely decisions regarding required disclosures and to make the certifications of the Chief Executive Officer and Chief Financial
Officer of Norwood required under the Exchange Act.

(b) Norwood has designed and maintains a system of internal control over financial
reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) sufficient to provide reasonable assurance concerning the reliability of financial
reporting and the preparation of financial statements for external purposes in accordance with GAAP as consistently applied by Norwood, including reasonable assurance (i) that transactions are executed in accordance with management’s
general or specific authorizations and recorded as necessary to permit preparation of