4 0 | T M X G R O U P S U S TA I N A B I L I T Y R E P O R T 2 0 2 4 REPORT CONTENTS ABOUT THIS REPORT SUSTAINABILITY STRATEGY SUSTAINABILITY GOVERNANCE PROSPERITY PLANET PEOPLE APPENDICES PRIVACY POLICY AND CUSTOMER PRIVACY 2024 Data Privacy TMX has established a privacy policy and a set of procedures that govern practices relating to collection, usage, and retention of customer information. These are based on global privacy principles in various jurisdictions. The privacy policy outlines as a set of recommended best practices to guide the development of its privacy procedures and as a guide to better inform employees and the public of its initiatives to protect the privacy of personal information. The practices set out in the privacy policy and accompanying standards and procedures seek to balance the right to privacy of individuals with respect to their personal information and TMX’s need to collect, use or disclose personal information for legitimate business purposes that a reasonable person would consider appropriate. Our privacy policies apply to our entire operations, under the oversight of the privacy compliance team. Our privacy policies are embedded in our enterprise risk and compliance management program and compliance with our privacy policies is part of the TMX employee code of conduct. The employee code of conduct contains provisions for confidential data handling. TMX largely relies on self-assessments to monitor privacy compliance. All incidents involving the handling of personal information are reported to our privacy compliance staff. TMX has implemented a vulnerability management program to ensure early identification and remediation of security vulnerabilities. Customer Privacy TMX obtains informed consent (including regarding the nature of information captured) for the personal information it uses, collects, and discloses in the course of its operations, except to the extent otherwise required or permitted by law. Individuals may give, withhold, or withdraw their consent to TMX’s use, collection, and disclosure of their personal information. The following is available to customers with regard to a customer’s ability to decide how private data is collected, used, retained, and processed: opt-out option is available; opt-in consent is required; request access to data held by TMX Group; request their data be corrected. Our customer privacy policies are enforced by our Chief Privacy Officer.
RkJQdWJsaXNoZXIy MjgzMzQ=