# EXCLUSION – VIOLATION OF LAWS ADDRESSING DATA PRIVACY

| Named Insured | International Business Machines Corporation |
|---------------|-------------------------------------------|
| Policy Symbol HDO | G48898919                                 |
| Policy Number | G48898919                                 |
| Policy Period | 05/21/2024 TO 05/21/2025                   |
| Endorsement Number | 13                                        |
| Effective Date of Endorsement | 05/21/2024                                |
| Issued By (Name of Insurance Company) | ACE American Insurance Company             |

Insert the policy number. The remainder of the information is to be completed only when this endorsement is issued subsequent to the preparation of the policy.

**THIS ENDORSEMENT CHANGES THE POLICY. PLEASE READ IT CAREFULLY.**

This endorsement modifies insurance provided under the following:

**COMMERCIAL GENERAL LIABILITY COVERAGE FORM**

A. The following is added to Paragraph 2. Exclusions of SECTION I – COVERAGE A – BODILY INJURY AND PROPERTY DAMAGE LIABILITY:

2. Exclusions

This insurance does not apply to:

**Violation Of Laws Addressing Data Privacy**

"Bodily injury" or "property damage" arising directly or indirectly out of any action or omission that violates or is alleged to violate:

(1) The Illinois Biometric Information Privacy Act (BIPA), including any amendment of or addition to such law;

(2) The California Consumer Privacy Act (CCPA), including any amendment of or addition to such law;

(3) The Child Online Privacy Protection Rule (COPPA), including any amendment of or addition to such law;

(4) Any federal, state or local statute, ordinance, regulation or law other than (1), (2) or (3) above that addresses, prohibits or limits access to the use of or the printing, dissemination, disposal, obtaining, collecting, storing, safeguarding, recording, retention, sending, transmitting, communicating, sharing, selling or distribution of any person's or organization's:

(a) personal material or information;

(b) financial material or information;

(c) health material or information;

(d) "biometric material or information";

(e) other material or information subject to protection under any law addressing data privacy or protection; or

(5) The European Union's General Data Protection Regulation or any law of a jurisdiction other than the United States of America (including its territories and possessions) or Puerto Rico that is similar to any statute, ordinance, regulation or other law described in paragraphs (1) through (4) above.

B. The following is added to Paragraph 2. Exclusions of SECTION I – COVERAGE B – PERSONAL AND ADVERTISING INJURY LIABILITY:

2. Exclusions

This insurance does not apply to: