Data Privacy. By accepting the RSUs, you explicitly and unambiguously consent to the collection, use, transfer, holding, storage and disclosure in electronic or other form, of your personal data as described in this Agreement and any other Award grant materials (“Data”) by and among, as applicable, the Company and its subsidiaries and Affiliates (collectively referred to in this Data Privacy section as the “Company”) and certain third party service providers including, but not limited to, Plan brokers, financial advisers and legal counsel, engaged by the Company (collectively, the “Providers”) for the purpose of implementing, administering and managing the Plan and complying with applicable laws, regulations and legislation.

Data Privacy. By entering into this Agreement, the Grantee: # authorizes the Company or any of the NextEra Entities, and any agent of the Company or any of the NextEra Entities administering the Plan or providing Plan recordkeeping services, to disclose to the Company or any of the NextEra Entities such information and data as the Company or any such NextEra Entities shall reasonably request in order to facilitate the administration of this Agreement; and # authorizes the Company or any of the NextEra Entities to store and transmit such information in electronic form, provided such information is appropriately safeguarded in accordance with Company policy.

Personal Data. You hereby explicitly and unambiguously consent to the collection, use and transfer, in electronic or other form, of your personal data as described in this Agreement and any other Option grant materials by and among, as applicable, your employer (the “Employer”), the Company and its Subsidiaries or Affiliates for the exclusive purpose of implementing, administering and managing your participation in the Plan.

Participant Data. The Committee will request from the Company and the Participating Employers complete information regarding the Deferred Amounts of each Participant and such other information as it considers necessary from time to time, and will treat Employer records as conclusive with respect to such information.

Data Privacy. The Participant hereby authorizes their actual employer (the “Employer”) to furnish the Corporation (and any agent of the Corporation administering the Plan or providing Plan recordkeeping services) with such information and data as it shall request in order to facilitate the grant of Awards and administration of the Plan and the Participant waives any data privacy rights such Participant might otherwise have with respect to such information. The Controller of personal data processing is Kimberly-Clark Corporation with registered offices at 351 Phelps Drive, Irving, Texas 75038, United States of America.

Data Retention. The Corporation will use the Participant’s personal data only as long as is necessary to implement, administer and manage his or her participation in the Plan or as required to comply with legal or regulatory obligations, including under tax and security laws. This period may extend until the Participant’s employment or service with the Corporation is terminated, plus any additional time periods necessary for compliance with law, exercise or defense of legal rights, and archiving, back-up and deletion processes.

The Personal Data will be held only as long as is necessary to implement, administer and manage the Participant’s participation in the Plan. The Participant may, at any time and without cost, contact Long-term Incentive Plan Administration at Kimberly Clark, 351 Phelps Drive Irving, TX 75038, USA to enforce his or her rights under the data protection laws in the Participant's country, which may include the right to # request access or copies of Personal Data subject to processing; # request rectification of incorrect Personal Data; # request deletion of Personal Data; # request restriction on processing of Personal Data; # request portability of Personal Data; # lodge complaints with competent authorities in the Participant's country; and/or # request a list with the names and addresses of any potential recipients of Personal Data.

The Participant may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to # obtain confirmation as to the existence of Data, # verify the content, origin and accuracy of Data, # request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of Data, and # to oppose, for legal reasons, the collection, processing or transfer of Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Participant’s participation in the Plan. The Participant may seek to exercise these rights by contacting ​ Legal Department.

Our business is subject to complex and evolving U.S. and foreign laws and regulations regarding privacy, data protection, competition, consumer protection, and other matters. Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our business practices, monetary penalties, increased cost of operations, or declines in user growth or engagement, or otherwise harm our business.

Protection of Security Interest. Each Grantor agrees that it will, at its own cost and expense, take any and all actions necessary to warrant and defend the right, title and interest of the Secured Parties in and to the Collateral against the claims and demands of all other Persons other than with respect to Permitted Liens.