Roku maintains security procedures and complies with privacy requirements for personal data.
“(g) Except as would not reasonably be expected to have a Company Material Adverse Effect, (i) since the Applicable Date the Company and its Subsidiaries have (A) implemented and maintained commercially reasonable and appropriate security procedures and practices, including data security testing or audits at reasonable and appropriate intervals, designed to protect the Information Technology and all Personal Data and other confidential data in the possession or under the control, or Processed by the Company or any of its Subsidiaries against loss, theft, misuse or unauthorized access, use, modification, alteration, encryption, destruction or disclosure, and (B) taken reasonable steps to ensure that any third party with access to any Personal Data collected by or on behalf of the Company or any of its Subsidiaries has implemented and maintains commercially reasonable security procedures and practices designed to protect the security of such Personal Data, (ii) the Company and its Subsidiaries are, and since the Applicable Date have been, in compliance with all applicable Laws and Orders regarding the privacy, security, and Processing of customer, employee and other Personal Data or breach notification, their respective published privacy policies and notices, and contractual obligations relating to the Processing of any Personal Data (collectively, “ Privacy Requirements ”) and (iii) as of the date hereof, and since the Applicable Date, except as otherwise expressly disclosed in”