Additional Brokerage Terms

Version 2

Last Updated: December 2024

1. These Additional Brokerage Terms (“Additional Terms”) apply with respect to the Personal Data disclosed by Client to Company (“Client Personal Data”) in connection with the Company’s provision of following services (“Services”):

   1.1. Alternative Risk Transfer (ART)

   1.2. Client Platforms Technology Team (CPPA)

   1.3. Construction

   1.4. CRB Risks and Analytics Corporate

   1.5. Crisis Management

   1.6. Facultative Practice

   1.7. Financial Institutions & Professional Services

   1.8. Financial Solutions

   1.9. FINEX

   1.10. Forensic Accounting (FA)

   1.11. General Property & Casualty

   1.12. Global Aviation and Space

   1.13. Global Marine

   1.14. Global Services and Solutions

   1.15. Healthcare & Life Sciences

   1.16. Integrated Casualty Consulting (ICC)

   1.17. Natural Resources

   1.18. Private Equity & Transactions Solutions

   1.19. Public Sector & Education

   1.20. Real Estate, Hospitality, and Leisure

   1.21. Retail & Distribution

   1.22. Risk & Analytics (RCCA)

   1.23. Strategic Risk Consulting (SRC)

   1.24. Surety

   1.25. Surplus Lines

   1.26. Technology & Telecom

   1.27. Transportation & Logistics

2. With respect to the Services, Client shall at all times:

   2.1. Provide Personal Data to Company, including any sensitive or special categories of Personal Data, in compliance with applicable laws, with proper notice provided and consent obtained for both Parties’ collection and use of such Personal Data and in compliance with Client’s own privacy policies and those of its clients, as applicable.

   2.2. Have procured all rights, licenses, directives (including those to disclose Personal Data and/or interact with Company), and/or consents, and have all power and authority necessary, to provide Personal Data to Company in a manner that does not constitute a “sale” of Personal Data from Client to Company under applicable privacy laws including but not limited to the California Consumer Privacy Act of 2018, as amended (“CCPA”), and to enable Company’s collection and processing of the same.

   2.3. Take all reasonable steps to ensure it has the rights and directives, as set forth above, in compliance with applicable laws, to disclose to Company any and all Personal Data requested by Company in conjunction with the provision of the coverages, products, and/or services to enable Company’s processing of such Personal Data.

   2.4. Provide appropriate notice to, and/or obtain necessary consent from, individuals, as may be required by law, in the form of a privacy policy or disclosure, to individuals regarding its collection, processing, and disclosure of Personal Data, particularly with respect to its disclosure of Personal Data to Company, including on any websites, applications, or similar online services or functions that involve the collection or use of Personal Data by or on behalf of Company.

   2.5. Obtain an individual’s consent, honor individual preferences, and confirm an individual’s directives to disclose Personal Data and/or interact with Company in a manner compliant with applicable laws, with respect to the use of Personal Data, including with respect to any and all disclosures of Personal Data to Company and as may be necessary for Company to provide its services to Client.

3. With respect to Services provided by our Bermuda entities only:

   3.1. Client represents that Willis Towers Watson is authorized to receive, use and process any such Personal Data and that Client has provided any required notices to data subjects and obtained the necessary consents from third parties, including the individuals to whom such Personal Data relates, that may be required for Willis Towers Watson to process or use the Personal Data for the purpose of providing the Services.

   3.2. Client acknowledges and agrees that in the event of any transfer from Bermuda of Client Personal Data by Willis Towers Watson to the Client, the Client shall ensure Client Personal Data is used in a manner that provides a comparable level of protection as required under applicable Bermuda data protection legislation.

4. Effective Date

   4.1. Client’s continued use of the Services or provision of Personal Data to Company after receiving notice of these Additional Terms will constitute Client’s full acceptance of these Additional Terms.

5. Further Amendment

   5.1. Company reserves the right to modify and/or revise these Additional Terms from time to time in its sole discretion.