Company: HURA
Filing Date: 2025-02-07
Form Type: S-4
Source: 0001193125-25-022803
Chunk: 923

Company: TuHURA Biosciences, Inc./NV
Filing Date: 2025-02-07
Form: S-4
Chunk 923
---
 legally bound to the extent relating to and governing Personal Data protection, privacy, and security, and (iii) Privacy Policies.

(b) The Company and each of its Subsidiaries have taken commercially reasonable steps consistent with their size and resources as well as the nature and purpose of the Processing and the types of Personal Data and, where appliable, Privacy and Security Laws, that are designed to: (i) protect their Business Systems and Personal Data from a Security Incident and (ii) maintain, as applicable, the confidentiality, integrity and availability of such Business Systems and Company Data.

(c) In the past three (3) years, the Company and each of its Subsidiaries has regularly performed a security risk assessment and obtained an independent vulnerability assessment performed by a recognized third-party firm. The Company and each of its Subsidiaries have used reasonable efforts to address and remediate all material vulnerabilities, threats, and deficiencies identified in each such assessment.

(d) In the past three (3) years, to the knowledge of the Company, neither the Company nor any of its Subsidiaries has: (i) experienced any material Security Incident involving any Business System or Company Data

<div align='center'>A-26</div>

in their respective possession, custody, or control or otherwise held or Processed on its behalf, (ii) been required to send a notification or report to any Person pursuant to applicable Privacy and Security Laws as a result of any material Security Incident, or (iii) failed in any material respect to comply with any notification or reporting requirement to any Person in connection with any material Security Incident under applicable Privacy and Security Laws.

(e) To the knowledge of the Company, there is no formal or written complaint, audit, proceeding, investigation, claim, or other Action currently pending or that has been, within the past three (3) years, brought or initiated against the Company or any of its Subsidiaries by any Person before a Governmental Entity with respect to any actual or alleged (i) material Security Incident or (ii) material violation of any applicable Privacy and Security Laws by the Company or any of its Subsidiaries.

(f) Except as would not, individually or the aggregate, reasonably be expected to have a Material Adverse Effect, the execution, delivery, and performance of this Agreement, and the consummation of the transactions contemplated hereby, do not and will not conflict with or otherwise result in a violation or breach of any applicable Privacy and Security Laws.

Section 3.27 No Other