Company: RPTX
Filing Date: 2025-12-03
Form Type: PREM14A
Source: 0001193125-25-306948
Chunk: 329

Company: Repare Therapeutics Inc.
Filing Date: 2025-12-03
Form: PREM14A
Chunk 329
---
 Requirement, or (ii) materially compromises (individually or in the aggregate) the confidentiality, security or privacy of any Personal                                                       
 Information. Neither the Company nor its Subsidiary has notified or had any obligation under any applicable Data Security and Privacy Requirement to notify, any affected person (including any Governmental Entity) or the media of any breach of 
 Personal Information.                                                                                                                                                                                                                              |

| (d) | All computer hardware and their associated firmware and operating systems, application software, database                                                                                                                                            
 engines and processed data, technology infrastructure and other computer systems (collectively, the “Technology”) used in connection with the Company’s and the Subsidiary’s operations are reasonable for conducting the                            
 operations related thereto except where it would not reasonably be expected to have a Material Adverse Change on the Company. Except where it would not be reasonably be expected to have a Material Adverse Change on the Company or its Subsidiary 
 (i) own or have validly licensed (and is not in breach of such licenses in any material respect) such Technology, (ii) has put in place reasonable virus protection and security measures in relation to such Technology, and (iii) have             
 reasonable back-up systems and audit procedures and disaster recovery and cybersecurity strategies in relation to the continued availability of the functionality provided by the Technology.                                                        |

| (e) | The Company and its Subsidiary have implemented and maintained an appropriate information security program that                                                                                                                                          
 includes documented cybersecurity measures and policies that: (i) are designed to ensure compliance with applicable Data Security and Privacy Requirements and are consistent with industry standards and practices of a business operating in a         
 similar industry; (ii) identify internal and external risks to the security of any proprietary or confidential information (including Personal Information) in the Company’s or its Subsidiary’s possession; (iii) implement,                            
 monitor, and maintain appropriate administrative, organizational, technical, and physical safeguards to control the risks described above in (ii); (iv) assess the Company’s and its Subsidiary’s data security practices, programs and                  
 risks; and (v) maintain incident response and notification procedures to facilitate compliance with applicable Data Security and Privacy Requirements, including in the case of any breach of security compromising Personal Information. The            
 Company and its Subsidiary take and have at all times taken commercially reasonable steps designed to ensure that any Personal Information Processed by service providers acting on behalf of the Company or its Subsidiary provides similar safeguards. |

| (f)