Company: NWFL
Filing Date: 2025-10-08
Form Type: S-4/A
Source: 0001193125-25-234244
Chunk: 303

Company: NORWOOD FINANCIAL CORP
Filing Date: 2025-10-08
Form: S-4/A
Chunk 303
---
sidiaries. A copy of all internally or externally prepared reports or audits that describe or evaluate the
information security procedures of Bankshares or the Bankshares Subsidiaries, all material policies related thereto and any failures to comply therewith have been provided to Norwood. Except as set forth on , to the Knowledge
of Bankshares, there has been no unauthorized access gained by any Person to Personal Information held or collected by Bankshares or any Bankshares Subsidiary, their employees, or third party contractors in the course of conducting
Bankshares’s and the Bankshares Subsidiaries’ business.

(b) Bankshares and each of the Bankshares Subsidiaries is subject to a
written information privacy and security program that maintains commercially reasonable measures to protect the privacy, confidentiality and security of all Personal Information against any (i) loss or misuse of Personal Information,
(ii) unauthorized or unlawful operations performed upon Personal Information, or (iii) other act or omission that compromises the security or confidentiality of Personal Information (clauses (i) through (iii), a “Security
Breach”). Except as set forth in since December 31, 2024, neither Bankshares nor any Bankshares Subsidiary has, to its Knowledge, experienced any Security Breach and there are no data security or other
technological vulnerabilities with respect to Bankshares’s or the Bankshares Subsidiaries’ information technology systems or networks.

Section 3.28 . None of the information relating to Bankshares and the Bankshares
Subsidiaries to be provided by Bankshares or the Bankshares Subsidiaries for use in (i) the Registration Statement on Form S-4 to be filed by Norwood in connection with the issuance of shares of Norwood
Common Stock pursuant to the Merger, as amended or supplemented (or on any successor or other appropriate form) (“Form S-4”), will, at the time the Form S-4
becomes effective, contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements therein, in light of the circumstances under which they were made, not misleading, and (ii) the proxy
statement/prospectus contained in the Form S-4, as amended or supplemented, and to be delivered to stockholders of Bankshares in connection with the solicitation of their approval of this Agreement and the
transactions contemplated hereby and thereby (“Proxy Statement/Prospectus”), as of the date such Proxy Statement/Prospect