Company: OSRH
Filing Date: 2025-01-29
Form Type: S-4/A
Source: 0001213900-25-007923
Chunk: 745

Company: OSR Holdings, Inc.
Filing Date: 2025-01-29
Form: S-4/A
Chunk 745
---
 for companies with similar resources in the same sector. The Company and each of the Company Subsidiaries have purchased a sufficient number of seat licenses for their Business Systems. (j) The Company and each of the Company Subsidiaries currently and previously have complied with (i) all applicable Privacy/Data Security Laws, (ii) any applicable privacy, data protection, security and other policies and procedures of the Company and/or the Company Subsidiary, respectively, concerning the processing, collection, disclosure, dissemination, storage, security, sale or use of Personal Information, Confidential Information or other Business Data, (iii) industry standards to which the Company or any Company Subsidiary is bound, and (iv) all Program Requirements (as defined below) and contractual commitments that the Company or any Company Subsidiary has entered into or is otherwise bound with respect to privacy, data protection, transfer and/or security (collectively, the “ Data Security Requirements ”). At all times, the Company and the Company Subsidiaries have each implemented and maintained, and have required third parties that process Personal Information or Confidential Information for or on behalf of the Company or the Company Subsidiaries to implement and maintain, a written information security program and reasonable and industry standard physical, technical and administrative security safeguards to protect the security and integrity of its Business Systems, Personal Information, Confidential Information and any Business Data, including conducting regular vulnerability scans, risk assessments and remediation activities and implementing industry standard procedures preventing unauthorized access, modification, disclosure, misuse, loss, or unavailability of the foregoing and/or the introduction of Disabling Devices (“ Program Requirements ”). Neither the Company nor any Company Subsidiaries has inserted, and no other person has inserted or alleged to have inserted any Disabling Device in any of the Business Systems, Company Software, Company Product and/or Company Service. Annex A-23 Neither the Company nor any of the Company Subsidiaries has (x) experienced any data or security breaches or unauthorized access, modification, disclosure, misuse, loss, or unavailability of Personal Information, Business Data, Business Systems, Company Software, Company Product and/or Company Service including those that were required to be reported under applicable Data Security Requirements; or (y) been subject to or received written notice of any audits, proceedings or investigations by any Governmental Authority or any person, or received any material claims or complaints regarding the processing, collection, disclosure, dissemination, storage, security, sale, or use of Personal Information or Confidential Information, or the