By electronically accepting Stock Units on the Merrill Lynch website, the Employee is declaring that the Employee agrees with the data processing practices described in this [Section 12] and that the Employee consents to the collection, processing and use of Data by the Company and the transfer of Data to the recipients mentioned therein for the purposes described therein.

Data Retention. Participant understands that the Company will use Participant’s Personal Data only as long as is necessary to implement, administer and manage Participant’s participation in the Plan, or to comply with legal or regulatory obligations, including under tax and securities laws. In the latter case, Participant understands and acknowledges that the Company’s legal basis for the processing of Participant’s Personal Data would be compliance with the relevant laws or regulations. When the Company no longer needs Participant’s Personal Data for any of the above purposes, Participant understands the Company will remove it from its systems.

Data Privacy. The Participant hereby authorizes their actual employer (the “Employer”) to furnish the Corporation (and any agent of the Corporation administering the Plan or providing Plan recordkeeping services) with such information and data as it shall request in order to facilitate the grant of Awards and administration of the Plan and the Participant waives any data privacy rights such Participant might otherwise have with respect to such information. The Controller of personal data processing is Kimberly-Clark Corporation with registered offices at 351 Phelps Drive, Irving, Texas 75038, United States of America.

Personal Data. Participant agrees, understands and acknowledges that by signing this Agreement, Participant has given his/her voluntary and explicit consent to the Company to process personal data and/or sensitive personal data concerning the Participant, including but not limited to the information provided in this Agreement and any changes thereto, other necessary or appropriate personal and financial data relating to Participant and Participant’s Award, participation in the Plan, and the Shares acquired upon vesting of the Award. Participant also hereby gives his or her explicit and voluntary consent to the Company to transfer any such personal data and/or sensitive personal data or information outside the country or jurisdiction in which the Participant works or is employed in order for the Company to fulfill its obligations under this Award and the Plan. Participant acknowledges that the Company and any subsidiary may make such personal data available to one or more third parties selected by the Company or the Administrator who provide services to the Company relating to the Award and the Plan. Participant hereby acknowledges that he or she has been informed of his or her right of access to his or her personal data by contacting his or her strategic growth representative. Participant understands and acknowledges that the transfer of the personal data is important to the administration of the Award and the Plan and that failure to consent to the transmission of such data may limit his or her participation in the Plan.

Data Privacy. You understand that the Company and the Company subsidiary for which you work may hold certain personal information about you, including, but not limited to, your name, home address and telephone number, date of birth, social insurance number or other identification number, any Shares or directorships held in the Company, details of all PBRSUs. By accepting the PBRSUs, you explicitly and unambiguously consent to the collection, use, transfer, holding, storage and disclosure in electronic or other form, of your personal data as described in this Agreement and any other Award grant materials (“Data”) by and among, as applicable, the Company, its subsidiaries and Affiliates (collectively referred to in this Data Privacy section as the “Company”) and certain third party service providers including, but not limited to, Plan brokers, financial advisers and legal counsel, engaged by the Company (collectively, the “Providers”) for the purpose of implementing, administering and managing the Plan and complying with applicable laws, regulations and legislation. You understand that the Data which may be collected, used, transferred, held, stored or disclosed by the Company and the Providers consists of certain Data about you, including, but not limited to, your name, home address, telephone number, date of birth, social insurance number or other government identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all PBRSUs or any other entitlement to Shares awarded, canceled, exercised, vested, unvested or outstanding in your favor. The Data may also include information relating to your health (for example, where your employment terminates due to death or Disability). You further understand that such collection, use, transfer, holding, storage or disclosure of the Data may be necessary for the purpose of implementing, administering and managing the Plan and complying with applicable laws, regulations and legislation. You understand that the Company or the Providers may be located in the United States or elsewhere, and that the laws of the country in which the Company and the Providers collect, use, transfer, hold, store or disclose the Data may have different legal protections for the Data than your country. However, regardless of the location of the Data, the Company protects the Data through reasonable physical, technical and administrative safeguards and requires that the Providers also have such safeguards in place. You understand that you may, at any time, request a copy of your Data, request additional information about the storage and processing of Data, require any necessary amendments to Data or refuse or withdraw the consents herein, in any case without cost, by contacting your local human resources representative in writing. You understand that refusing or withdrawing your consent may affect your ability to participate in the Plan as more fully described below. You understand that you are providing the consent herein on a purely voluntary basis. If you do not consent, or if you later seek to revoke your consent, your employment status or service and career with your employer will not be adversely affected; the only adverse consequence of refusing or withdrawing your consent is that the Company would not be able to grant PBRSUs or other equity awards or administer or maintain such awards. Therefore, you understand that refusing or withdrawing your consent may affect your ability to participate in the Plan. For more information on the consequences of your refusal to consent or withdrawal of consent, you understand that you may contact your local human resources representative.

Data Protection. The Board, the Committee, and any other person or entity empowered by the Board or the Committee to administer the Plan may process, store, transfer or disclose personal data of the Participants to the extent required for the implementation and administration of the Plan. The Board, the Committee and any other person or entity empowered by the Board or the Committee to administer the Restated Plan shall comply with any applicable data protection laws.

Personal Data. The following provision replaces [Section 8] of the Agreement in its entirety:

Data Privacy. By entering into this Agreement, Recipient:

Selling Data. Simultaneous with AYTU’s delivery to TRIS of the Quarterly Payment Report, AYTU shall provide a report to TRIS:

Personal Data. You hereby explicitly and unambiguously consent to the collection, use and transfer, in electronic or other form, of your personal data as described in this Agreement and any other Restricted Stock Unit grant materials by and among, as applicable, your employer (the “Employer”), the Company and its Subsidiaries or Affiliates for the exclusive purpose of implementing, administering and managing your participation in the Plan.