Data Privacy. With respect to Personal Data (as defined below) that one Party or its Affiliates may provide to the other Party or its Affiliates in connection with this Agreement, the Parties agree that it and each of its Affiliates will comply with applicable privacy laws, including, but not limited to EU Regulation (EU) 2016/679 (GDPR) and California Consumer Privacy Act (CCPA). The Parties shall ensure that the Party or its Affiliate transferring Personal Data has legal grounds to share such data relating to the purpose for which the Personal Data is exchanged, in particular by obtaining the individual’s consent or providing all necessary notices to the individual concerned that, their Personal Data may be shared with the other Party. “Personal Data” shall have the meaning as defined in GDPR) and the equivalent term in CCPA as applicable. Neither Party considers itself or its Affiliates to process Personal Data as a “processor” or “service provider” on behalf of the other, however the Parties further agree to execute any further documentation as may be required to ensure continued compliance with the applicable law in the event that the nature of the data processing and data sharing relationship between or among the Parties and their respective Affiliates changes. The sharing of Personal Data for the permitted purpose shall not be considered a “sale” (as defined in CCPA).

Data Privacy. The Participant hereby explicitly and unambiguously consents to the collection, use, processing and transfer, in electronic or other form, of the Participant’s personal data as described in this document by and among, as applicable, the Company and its Subsidiaries and Affiliates for the exclusive purpose of implementing, administering and managing his or her participation in the Plan.

Data Privacy. The Company and Consultant each acknowledge and agree that where a party processes personal data under or in connection with this Agreement it alone determines the purposes and means of such processing as a data controller. To the extent Consultant discloses, provides or otherwise makes available, personal data to Company under or in connection with the Agreement (“Shared Personal Data”), Consultant acknowledges that Company and its agents may process such Shared Personal Data for any purpose related to this Agreement, including for any purpose necessary to comply with applicable law. In connection with the Shared Personal Data, Consultant warrants that it: # has provided adequate notices to, and obtained valid consents from, the relevant individuals, in each case, to the extent necessary for Company or its agents to process the Shared Personal Data in connection with this Agreement which may include the transfer of the Shared Personal Data to Company outside of the European Economic Area (EEA); and # shall not, by act or omission, cause Company to violate any Data Protection Laws, notices provided to, or consents obtained from, data subjects as result of processing the Shared Personal Data in connection with this Agreement. In addition, Consultant agrees to comply with applicable data protection and data privacy laws.

Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Award Agreement by and among, as applicable, the Company and its affiliates for the exclusive purpose of implementing, administering and managing Participant’s participation in the Option.

Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Award Agreement and any other Restricted Stock grant materials by and among, as applicable, the Employer or other Service Recipient, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan.

General aspects.

Data Privacy. As a condition for receiving any Award, each Participant explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of personal data as described in this section by and among the Company and its Subsidiaries and affiliates exclusively for implementing, administering and managing the Participant’s participation in the Plan. The Company and its Subsidiaries and affiliates may hold certain personal information about a Participant, including the Participant’s name, address and telephone number; birthdate; social security, insurance number or other identification number; salary; nationality; job title(s); any Shares held in the Company or its Subsidiaries and affiliates; and Award details, to implement, manage and administer the Plan and Awards (the “Data”). The Company and its Subsidiaries and affiliates may transfer the Data amongst themselves as necessary to implement, administer and manage a Participant’s participation in the Plan, and the Company and its Subsidiaries and affiliates may transfer the Data to third parties assisting the Company with Plan implementation, administration and management. These recipients may be located in the Participant’s country, or elsewhere, and the Participant’s country may have different data privacy laws and protections than the recipients’ country. By accepting an Award, each Participant authorizes such recipients to receive, possess, use, retain and transfer the Data, in electronic or other form, to implement, administer and manage the Participant’s participation in the Plan, including any required Data transfer to a broker or other third party with whom the Company or the Participant may elect to deposit any Shares. The Data related to a Participant will be held only as long as necessary to implement, administer, and manage the Participant’s participation in the Plan. A Participant may, at any time, view the Data that the Company holds regarding such Participant, request additional information about the storage and processing of the Data regarding such Participant, recommend any necessary corrections to the Data regarding the Participant or refuse or withdraw the consents in this Section 10.9 in writing, without cost, by contacting the local human resources representative. The Company may cancel Participant’s ability to participate in the Plan and, in the Administrator’s discretion, the Participant may forfeit any outstanding Awards if the Participant refuses or withdraws the consents in this Section 10.9. For more information on the consequences of refusing or withdrawing consent, Participants may contact their local human resources representative.

Data Privacy. By entering into this Agreement, the Participant: # authorizes the Company and each Affiliate, and any agent of the Company or any Affiliate administering the Plan or providing Plan recordkeeping services, to disclose to the Company or any of its Affiliates such information and data as the Company or any such Affiliate shall request in order to facilitate the grant of Restricted Share Units and the administration of the Plan; and # authorizes the Company and each Affiliate to store and transmit such information in electronic form for the purposes set forth in this Agreement. For the purposes of the Plan, the Wave Life Sciences UK Limited Employee Privacy Notice (“Privacy Notice”) informs the Participant whether their personal data is processed under the EU’s General Data Protection Regulation (2016/679) (or any successor or implementing laws) (the "GDPR") and if so, the basis for processing such data. The Participant understands that, in accordance with the Privacy Notice, their personal data may be transferred and/or processed for any purpose relating to the Plan by the Company, its Affiliates, and those administering or providing services under the Plan.

Data Privacy. By entering into this Agreement, and as a condition of the grant of the Restricted Stock Units, Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of his or her personal data as described in this document by and among, as applicable, the Employer, and Company and its Subsidiaries and affiliates for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan.

DATA PRIVACY. By entering into this Agreement, the Participant: # authorizes the Company and each Affiliate, and any agent of the Company or any Affiliate administering the Plan or providing Plan recordkeeping services, to disclose to the Company or any of its Affiliates such information and data as the Company or any such Affiliate shall request in order to facilitate the grant of options and the administration of the Plan; # to the extent permitted by applicable law waives any data privacy rights he or she may have with respect to such information, and # authorizes the Company and each Affiliate to store and transmit such information in electronic form for the purposes set forth in this Agreement.