Data Privacy. The Participant hereby acknowledges that:

Data Privacy. With respect to Personal Data (as defined below) that one Party or its Affiliates may provide to the other Party or its Affiliates in connection with this Agreement, the Parties agree that it and each of its Affiliates will comply with applicable privacy laws, including, but not limited to EU Regulation (EU) 2016/679 (GDPR) and California Consumer Privacy Act (CCPA). The Parties shall ensure that the Party or its Affiliate transferring Personal Data has legal grounds to share such data relating to the purpose for which the Personal Data is exchanged, in particular by obtaining the individual’s consent or providing all necessary notices to the individual concerned that, their Personal Data may be shared with the other Party. “Personal Data” shall have the meaning as defined in GDPR) and the equivalent term in CCPA as applicable. Neither Party considers itself or its Affiliates to process Personal Data as a “processor” or “service provider” on behalf of the other, however the Parties further agree to execute any further documentation as may be required to ensure continued compliance with the applicable law in the event that the nature of the data processing and data sharing relationship between or among the Parties and their respective Affiliates changes. The sharing of Personal Data for the permitted purpose shall not be considered a “sale” (as defined in CCPA).

Data Privacy. The Company and Consultant each acknowledge and agree that where a party processes personal data under or in connection with this Agreement it alone determines the purposes and means of such processing as a data controller. To the extent Consultant discloses, provides or otherwise makes available, personal data to Company under or in connection with the Agreement (“Shared Personal Data”), Consultant acknowledges that Company and its agents may process such Shared Personal Data for any purpose related to this Agreement, including for any purpose necessary to comply with applicable law. In connection with the Shared Personal Data, Consultant warrants that it: # has provided adequate notices to, and obtained valid consents from, the relevant individuals, in each case, to the extent necessary for Company or its agents to process the Shared Personal Data in connection with this Agreement which may include the transfer of the Shared Personal Data to Company outside of the European Economic Area (EEA); and # shall not, by act or omission, cause Company to violate any Data Protection Laws, notices provided to, or consents obtained from, data subjects as result of processing the Shared Personal Data in connection with this Agreement. In addition, Consultant agrees to comply with applicable data protection and data privacy laws.

Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Award Agreement by and among, as applicable, the Company and its affiliates for the exclusive purpose of implementing, administering and managing Participant’s participation in the Option.

Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Award Agreement and any other Restricted Stock grant materials by and among, as applicable, the Employer or other Service Recipient, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan.

Data Privacy. You hereby explicitly and unambiguously consent to the collection, use and transfer, in electronic or other form, of your personal data as described in this Award Agreement and any other RSU grant materials by and among, as applicable, MSCI and any subsidiary of MSCI for the exclusive purpose of implementing, administering and managing your participation in the Plan.

Data Privacy. You hereby explicitly and unambiguously consent to the collection, use and transfer, in electronic or other form, of your personal data as described in this Option Agreement and any other grant materials by and among, as applicable, Employer, the Company and any other Affiliate for the exclusive purpose of implementing, administering and managing your participation in the Plan.

Data Privacy. The Participant hereby explicitly and unambiguously consents to the collection, use, processing and transfer, in electronic or other form, of the Participant’s personal data as described in this document by and among, as applicable, the Company and its Subsidiaries and Affiliates for the exclusive purpose of implementing, administering and managing his or her participation in the Plan.

The Grantee hereby acknowledges and understands that the Grantee’s personal data is collected, retained, used, processed, disclosed and transferred, in electronic or other form, as described in this Agreement by and among, as applicable, the Grantee’s employer, the Company and its Subsidiaries, and third parties assisting in the implementation, administration and management of the Plan for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan.

Data Privacy. You hereby explicitly and unambiguously consent to the collection, use and transfer, in electronic or other form, of your personal data as described in this Award Agreement and any other RSU grant materials by and among, as applicable, MSCI and any Subsidiary for the exclusive purpose of implementing, administering and managing your participation in the Plan.