Identifiers and Contact Information. This category includes names, alias, postal address, gender, telephone numbers, mobile numbers, unique personal identifiers, online identifier, Internet Protocol address, email address, signature, account name, dates of birth, bank account information, citizenship status, marital status, demographic data (including age, nationality, place of birth), and other similar contact information and identifiers.

·  Collect and process employment applications, including confirming eligibility for employment, recruitment, background and related checks, onboarding, and offboarding.

·  Process payroll, other forms of compensation, and employee benefit plan and program design and administration, including enrollment and claims handling, and leave of absence administration.

·  Maintain personnel and exam records, including evaluations, and record retention requirements.

·  Comply with applicable state and federal labor, employment, tax, benefits, workers’ compensation, disability, equal employment opportunity, workplace safety, and related laws.

·  Analyze human resources trends and metrics.

·  Provide career development, coaching, and training opportunities.

·  Communicate with employees and/or employees’ emergency contacts and plan beneficiaries.

·  Prevent unauthorized access to or use of Milliman’s property, including Milliman’s information systems, electronic devices, network, data, and information.

·  Ensure adherence to Milliman’s policies.

·  Investigate complaints, grievances, and suspected violations of internal policies.

·  Monitor attendance, including vacation, sick leave, and other absences.

·  Provide general corporate services.

·  Store, process, and manage employee information using human resources information systems.

·  Adhere to whistleblowing procedures.

·  Collect and process scholarship applications.

·  Provide global mobility and immigration services.

·  Contract administration.

·  Execute and perform client engagements (where it manages the administration of contracts).

·  Maintain client accounts.

·  Fulfill and respond to requests and inquiries about Milliman products or services.

·  Send marketing communications, surveys, and questionnaires.

·  Operate Milliman’s business.

·  Manage the relationship with clients’ representatives, officers, agents and employees, business partners, providers, parties to a contract.

·  Communicate with clients’ representatives, officers, agents and employees, business partners, providers, parties to a contract.

Personal Information categories listed in California Civil Code § 1798.80(e). This category includes insurance policy number, employment history, medical information, or health insurance information (generally in pseudonymized form or de-identified).

·  Collect and process employment applications, including confirming eligibility for employment, recruitment, background and related checks, onboarding, and offboarding.

·  Process payroll, other forms of compensation, and employee benefit plan and program design and administration, including enrollment and claims handling, and leave of absence administration.

· Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).

Protected Classification Information. This category includes characteristics of protected classifications under California or federal law, such as race, color, religion or creed, national origin or ancestry, citizenship, medical condition, physical or mental disability, age (40 years or older), sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military status.

·  Comply with applicable state and federal equal employment opportunity, pay equity, and pay transparency laws.

·  Design, implement, and promote Milliman’s diversity, equity, and inclusion programs.

·  Investigate complaints, grievances, and suspected violations of Milliman policies.

· Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).

Commercial information. This category includes products or services provided, obtained, or considered.

·  Contract administration.

·  Execute and perform client engagements.

·  Provide various professional services to clients.

·  Activate and maintain client accounts.

·  Providing offers and information to you about products, services, or events offered.

·  Maintain client account.

·  Send marketing communications, surveys, and questionnaires.

Biometric Information. This category can include identifiers or identifying information, such as fingerprints.

·  Comply with industry and legal requirements, including background check requirements.

Internet or other Electronic Data. This category includes, without limitation:

• All activity on Milliman’s information systems, such as anonymized internet browsing history, anonymized search history or intranet activity, email communications, stored documents and emails, IP addresses, login details, usernames, passwords, and
• All activity on communications systems including phone calls, call logs, voice mails, text messages, chat logs, app use, mobile browsing and search history, mobile email communications, and other information regarding an employee’s use of company-issued devices.

·  Prevent unauthorized access to or use of Milliman’s property, including Milliman’s information systems, electronic devices, network, data, and information.

·  Information Technology (IT) security purposes, including incident responses.

·  IT administration, including providing backups, software installation, helpdesk services, the logging and monitoring of network activity and the administration of Milliman’s cloud platform.

·  Investigate complaints, grievances, and suspected violations of Milliman policies.

·  Analyze how our websites are used, accessed, and how they are performing.

·  Operate Milliman’s business.

·  Manage the relationship with clients’ representatives, officers, agents and employees, business partners, providers, parties to a contract.

·  Communicate with clients’ representatives, officers, agents and employees, business partners, providers, parties to a contract.

Audio, electronic, and visual information. This category includes information collected from cameras, microphones, and similar devices.

·  Prevent unauthorized access to or use of Milliman’s property, including Milliman’s server rooms.

·  Conduct interviews and meetings.

·  Providing offers and information to you about products, services, or events offered.

Professional or Employment-related Information. This category includes, without limitation:

• Data submitted with employment applications including salary history, employment history, job titles, employment recommendations, etc.
• Professional and criminal background check information,
• Work authorization,
• Fitness for duty data and reports,
• Performance evaluations and disciplinary records,
• Salary, compensation, and bonus data,
• Timesheets,
• Practice group,
• Professional licenses, skills, and training records,
• Benefit plan enrollment, participation, and claims information, and
• Leave of absence information, including religious and family obligations, physical and mental health data concerning employee and their family members.

·  Collect and process employment applications, including confirming eligibility for employment, recruitment, background and related checks, onboarding, and offboarding.

·  Process payroll, other forms of compensation, and employee benefit plan and program design and administration, including enrollment and claims handling, and leave of absence administration.

·  Maintain personnel and exam records, including evaluations, and comply with record retention requirements.

·  Communicate with employees and/or employees’ emergency contacts and plan beneficiaries.

·  Comply with applicable state and federal labor, employment, tax, benefits, workers compensation, disability, equal employment opportunity, workplace safety, and related laws.

·  Business management.

·  Investigate complaints, grievances, and suspected violations of Milliman policies.

·  Analyze human resources trends and metrics.

·  Provide learning and career development, coaching, and training opportunities.

·  Store, process, and manage employee information using human resources information systems.

·  Monitor attendance, including vacation, sick leave, and other absences.

·  Verification of employment.

·  Adhere to whistleblowing procedures, including collection of information and administration.

·  Provide global mobility and immigration services.

·  Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).

Education Data. This category includes education history, degrees, and related information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).

·  Collect and process employment applications, including confirming eligibility for employment, recruitment, background and related checks, onboarding, and offboarding.

·  Collect and process scholarship applications, including confirming eligibility for scholarships for which Milliman acts as a sponsor.

·  Evaluate an individual’s appropriateness for hire or promotion at Milliman.

·  Analyze human resources trends and metrics.

·  Provide and track career development and training opportunities.

·  Design, implement, and promote Milliman’s diversity, equity, and inclusion programs.

·  Maintain employee records, including exam records.

·  Store, process, and manage employee/applicant information using human resources information systems.

·  Provide global mobility and immigration services.

·  Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).

Medical Information. This category includes, without limitation:

• Symptoms, test results, and other indicators of exposure to the coronavirus (COVID-19) and related vaccination status information,
• Medical conditions, device identifiers, record number, and treatment information,
• Dates of medical service, diagnosis, and disease/disorder information,
• Disability information,
• Insurance policy information,
• Leave of absence information, including family obligations, physical and mental health data concerning employee and their family members, and
• Travel information and information regarding close contacts.

·  Communicate with employees and/or employees’ emergency contacts.

·   Maintain personnel records and documents.

·   Comply with applicable state and federal laws.

·   Adaptability to the workplace.

·   Monitor attendance, including sick leave.

·   Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).

Inferences. This category includes engaging in human capital analytics, including, but not limited to, identifying certain correlations about individuals and success on their jobs, analyzing data to improve retention, and analyzing employee preferences to inform HR policies, programs and procedures.

·  Employee engagement and pulse survey analysis to determine retention strategies.

·  Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).

Sensitive Personal Information. This category includes sensitive information, such as:

• Social Security, driver’s license, state identification card, or passport number,
• Financial account information that allows access to an account, including log-in credentials, financial account numbers, passwords, etc.,
• Racial or ethnic origin, or religious or philosophical beliefs,
• Religious beliefs.
• Sexual Orientation.
• Citizenship or immigration status.
• Personal information from a known child.
• Mental of physical health condition.
• Content of mail, email, and text messages, unless Milliman is the intended recipient of the communication.

·  Collect and process employment applications, including confirming eligibility for employment, recruitment, background and related checks, onboarding, and offboarding.

·  Comply with applicable state and federal labor, employment, tax, benefits, workers compensation, disability, equal employment opportunity, workplace safety, and related laws.

·  Process payroll, other forms of compensation, and employee benefit plan and program design and administration, including enrollment and claims handling, and leave of absence administration.

·  Monitor attendance, including vacation, sick leave, and other absences.

·  Design, implement, and promote Milliman’s diversity, equity, and inclusion programs.

·  Comply with applicable state and federal laws.

·  Maintain personnel records and documents.

·  Analyze human resources metrics and trends.

·  Monitor attendance, including vacation, sick leave, and other absences.

·  Provide global mobility and immigration services.

·  Verification of employment.

·  Provide various professional services to clients in its capacity as a Service Provider or Data Processor (the personal information is typically in pseudonymized form or de-identified).