By electronically accepting Stock Units on the Merrill Lynch website, the Employee is declaring that the Employee agrees with the data processing practices described in this [Section 12] and that the Employee consents to the collection, processing and use of Data by the Company and the transfer of Data to the recipients mentioned therein for the purposes described therein.

Data Privacy. By entering into this Agreement, the Grantee: # authorizes the Company or any of the NextEra Entities, and any agent of the Company or any of the NextEra Entities administering the Plan or providing Plan recordkeeping services, to disclose to the Company or any of the NextEra Entities such information and data as the Company or any such NextEra Entities shall reasonably request in order to facilitate the administration of this Agreement; and # authorizes the Company or any of the NextEra Entities to store and transmit such information in electronic form, provided such information is appropriately safeguarded in accordance with Company policy.

Selling Data. Simultaneous with AYTU’s delivery to TRIS of the Quarterly Payment Report, AYTU shall provide a report to TRIS:

Data Privacy. The Participant hereby authorizes their actual employer (the “Employer”) to furnish the Corporation (and any agent of the Corporation administering the Plan or providing Plan recordkeeping services) with such information and data as it shall request in order to facilitate the grant of Awards and administration of the Plan and the Participant waives any data privacy rights such Participant might otherwise have with respect to such information. The Controller of personal data processing is Kimberly-Clark Corporation with registered offices at 351 Phelps Drive, Irving, Texas 75038, United States of America.

Data Retention. The Corporation will use the Participant’s personal data only as long as is necessary to implement, administer and manage the Participant’s participation in the Plan or as required to comply with legal or regulatory obligations, including under tax and security laws. This period may extend until the Participant’s employment or service with the Corporation is terminated, plus any additional time periods necessary for compliance with law, exercise or defense of legal rights, and archiving, back-up and deletion processes.

Data Protection. The Board, the Committee, and any other person or entity empowered by the Board or the Committee to administer the Plan may process, store, transfer or disclose personal data of the Participants to the extent required for the implementation and administration of the Plan. The Board, the Committee and any other person or entity empowered by the Board or the Committee to administer the Restated Plan shall comply with any applicable data protection laws.

Personal Data. The following provision replaces [Section 8] of the Agreement in its entirety:

Data Privacy. By entering into this Agreement, Recipient:

Data Privacy. The Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of the Participant’s personal data as described in the Award Agreement and any other grant materials by and among, as applicable, the Company, the Employer and any other Subsidiary for the exclusive purpose of implementing, administering and managing the Participant’s participation in the Plan.

Personal Data. You hereby explicitly and unambiguously consent to the collection, use and transfer, in electronic or other form, of your personal data as described in this Agreement and any other Restricted Stock Unit grant materials by and among, as applicable, your employer (the “Employer”), the Company and its Subsidiaries or Affiliates for the exclusive purpose of implementing, administering and managing your participation in the Plan.